Community Patterns

Community Library Entry

0

Regular Expression
Created·2021-11-24 19:25
Updated·2021-11-24 19:47
Flavor·PCRE2 (PHP)

/
\n\s\sname:\sI_LOGON_AUTH_FAILED\n[\s\S]*?\s\ssession\n[\s\S]*?\s\s\s\sremoteAddress:\s(?<ipaddress>.*?):[0-9]*\n[\s\S]*?\s\sauthentication\n[\s\S]*?\s\s\s\suserName:\s(?<username>.*)
/
i
Open regex in editor

Description

Windows Bitvise SSH Server Event Log regex for "I_LOGON_AUTH_FAILED" events. Used in the IPBan configuration.

Submitted by paprikar