Regular Expressions 101

Community Patterns

Community Library Entry

0

Regular Expression
PCRE2 (PHP >=7.3)

/
\n\s\sname:\sI_LOGON_AUTH_FAILED\n[\s\S]*?\s\ssession\n[\s\S]*?\s\s\s\sremoteAddress:\s(?<ipaddress>.*?):[0-9]*\n[\s\S]*?\s\sauthentication\n[\s\S]*?\s\s\s\suserName:\s(?<username>.*)
/
i

Description

Windows Bitvise SSH Server Event Log regex for "I_LOGON_AUTH_FAILED" events. Used in the IPBan configuration.

Submitted by paprikar - 3 years ago (Last modified 3 years ago)