Regular Expressions 101

Community Library

x

Windows Bitvise SSH Server Event Log

Open Workspace
  • PCRE2 (PHP)
  • Match
0

Regular Expression

/
\n\s\sname:\sI_LOGON_AUTH_FAILED\n[\s\S]*?\s\ssession\n[\s\S]*?\s\s\s\sremoteAddress:\s(?<ipaddress>.*?):[0-9]*\n[\s\S]*?\s\sauthentication\n[\s\S]*?\s\s\s\suserName:\s(?<username>.*)
/
i

Description

Windows Bitvise SSH Server Event Log regex for "I_LOGON_AUTH_FAILED" events. Used in the IPBan configuration.

Submitted by paprikar