Hi
I'm by no means an expert on this but something like this may work
failregex = ^.* 401 POST .*. \(<HOST>\) .*$
The brackets "()" need to be escaped as they have special meaning within
the regexp...
Regards
------------------------
Rhys McWilliams
On 2021/05/04 13:27, [email protected] wrote:
Good day,
Hope you guys are doing well!
I’ve been trying for a while now to get the correct failregex for the
log entry below to ban the IP (192.168.1.141) without any success. The
log is produced by Jupyter notebooks via the “jupyter notebook --debug
> jupyter.log 2>&1” command line since I am not aware of any other
logs to use produced by Jupyter notebooks. The “W” in the beginning of
the log entry line appears to be the major issue I’m struggling with,
any help to get the failregex to capture the “401 POST” and the host
IP (192.168.1.141) from the log entry below will be greatly appreciated.
[W 11:58:05.222 NotebookApp] 401 POST /login?next=%2F (192.168.1.141)
5.01ms referer=https://192.168.1.193:8888/login
Many thanks in advance.
Best regards,
Jake
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
