Gecko [ newweb.supercareproducts.com ]

Name	Size	Permission	Date
ignorecommands	[ DIR ]	drwxr-xr-x	2026-04-22 20:14
3proxy.conf	467 B	-rw-r--r--	2023-04-01 14:40
apache-auth.conf	3.15 KB	-rw-r--r--	2023-04-01 14:40
apache-badbots.conf	2.76 KB	-rw-r--r--	2023-04-01 14:40
apache-botsearch.conf	1.24 KB	-rw-r--r--	2023-04-01 14:40
apache-common.conf	1.58 KB	-rw-r--r--	2023-04-01 14:40
apache-fakegooglebot.conf	403 B	-rw-r--r--	2023-04-01 14:40
apache-modsecurity.conf	511 B	-rw-r--r--	2023-04-01 14:40
apache-nohome.conf	596 B	-rw-r--r--	2023-04-01 14:40
apache-noscript.conf	1.22 KB	-rw-r--r--	2023-04-01 14:40
apache-overflows.conf	2.14 KB	-rw-r--r--	2023-04-01 14:40
apache-pass.conf	362 B	-rw-r--r--	2023-04-01 14:40
apache-shellshock.conf	1020 B	-rw-r--r--	2023-04-01 14:40
assp.conf	3.41 KB	-rw-r--r--	2023-04-01 14:40
asterisk.conf	2.33 KB	-rw-r--r--	2023-04-01 14:40
bitwarden.conf	427 B	-rw-r--r--	2023-04-01 14:40
botsearch-common.conf	522 B	-rw-r--r--	2023-04-01 14:40
centreon.conf	307 B	-rw-r--r--	2023-04-01 14:40
common.conf	2.71 KB	-rw-r--r--	2023-04-01 14:40
counter-strike.conf	244 B	-rw-r--r--	2023-04-01 14:40
courier-auth.conf	463 B	-rw-r--r--	2023-04-01 14:40
courier-smtp.conf	512 B	-rw-r--r--	2023-04-01 14:40
cyrus-imap.conf	444 B	-rw-r--r--	2023-04-01 14:40
directadmin.conf	338 B	-rw-r--r--	2023-04-01 14:40
domino-smtp.conf	2.06 KB	-rw-r--r--	2023-04-01 14:40
dovecot.conf	2.58 KB	-rw-r--r--	2023-04-01 14:40
dropbear.conf	1.69 KB	-rw-r--r--	2023-04-01 14:40
drupal-auth.conf	547 B	-rw-r--r--	2023-04-01 14:40
ejabberd-auth.conf	1.54 KB	-rw-r--r--	2023-04-01 14:40
exim-common.conf	534 B	-rw-r--r--	2023-04-01 14:40
exim-spam.conf	2.11 KB	-rw-r--r--	2023-04-01 14:40
exim.conf	2.81 KB	-rw-r--r--	2023-04-01 14:40
freeswitch.conf	1.88 KB	-rw-r--r--	2023-04-01 14:40
froxlor-auth.conf	1.18 KB	-rw-r--r--	2023-04-01 14:40
gitlab.conf	236 B	-rw-r--r--	2023-04-01 14:40
grafana.conf	388 B	-rw-r--r--	2023-04-01 14:40
groupoffice.conf	236 B	-rw-r--r--	2023-04-01 14:40
gssftpd.conf	322 B	-rw-r--r--	2023-04-01 14:40
guacamole.conf	1.41 KB	-rw-r--r--	2023-04-01 14:40
haproxy-http-auth.conf	1.14 KB	-rw-r--r--	2023-04-01 14:40
horde.conf	404 B	-rw-r--r--	2023-04-01 14:40
kerio.conf	938 B	-rw-r--r--	2023-04-01 14:40
lighttpd-auth.conf	459 B	-rw-r--r--	2023-04-01 14:40
mongodb-auth.conf	2.23 KB	-rw-r--r--	2023-04-01 14:40
monit.conf	787 B	-rw-r--r--	2023-04-01 14:40
monitorix.conf	640 B	-rw-r--r--	2023-04-01 14:40
mssql-auth.conf	441 B	-rw-r--r--	2023-04-01 14:40
murmur.conf	927 B	-rw-r--r--	2023-04-01 14:40
mysqld-auth.conf	953 B	-rw-r--r--	2023-04-01 14:40
nagios.conf	400 B	-rw-r--r--	2023-04-01 14:40
named-refused.conf	1.56 KB	-rw-r--r--	2023-04-01 14:40
nginx-bad-request.conf	474 B	-rw-r--r--	2023-04-01 14:40
nginx-botsearch.conf	740 B	-rw-r--r--	2023-04-01 14:40
nginx-http-auth.conf	1.02 KB	-rw-r--r--	2023-04-01 14:40
nginx-limit-req.conf	1.48 KB	-rw-r--r--	2023-04-01 14:40
nsd.conf	779 B	-rw-r--r--	2023-04-01 14:40
openhab.conf	452 B	-rw-r--r--	2023-04-01 14:40
openwebmail.conf	495 B	-rw-r--r--	2023-04-01 14:40
oracleims.conf	1.89 KB	-rw-r--r--	2023-04-01 14:40
pam-generic.conf	947 B	-rw-r--r--	2023-04-01 14:40
perdition.conf	568 B	-rw-r--r--	2023-04-01 14:40
php-url-fopen.conf	891 B	-rw-r--r--	2023-04-01 14:40
phpmyadmin-syslog.conf	278 B	-rw-r--r--	2023-04-01 14:40
portsentry.conf	242 B	-rw-r--r--	2023-04-01 14:40
postfix.conf	3.15 KB	-rw-r--r--	2023-04-01 14:40
proftpd.conf	1.14 KB	-rw-r--r--	2023-04-01 14:40
pure-ftpd.conf	2.35 KB	-rw-r--r--	2023-04-01 14:40
qmail.conf	795 B	-rw-r--r--	2023-04-01 14:40
recidive.conf	1.34 KB	-rw-r--r--	2023-04-01 14:40
roundcube-auth.conf	1.46 KB	-rw-r--r--	2023-04-01 14:40
scanlogd.conf	354 B	-rw-r--r--	2023-04-01 14:40
screensharingd.conf	821 B	-rw-r--r--	2023-04-01 14:40
selinux-common.conf	538 B	-rw-r--r--	2023-04-01 14:40
selinux-ssh.conf	570 B	-rw-r--r--	2023-04-01 14:40
sendmail-auth.conf	790 B	-rw-r--r--	2023-04-01 14:40
sendmail-reject.conf	2.9 KB	-rw-r--r--	2023-04-01 14:40
sieve.conf	371 B	-rw-r--r--	2023-04-01 14:40
slapd.conf	706 B	-rw-r--r--	2023-04-01 14:40
softethervpn.conf	451 B	-rw-r--r--	2023-04-01 14:40
sogo-auth.conf	722 B	-rw-r--r--	2023-04-01 14:40
solid-pop3d.conf	1.07 KB	-rw-r--r--	2023-04-01 14:40
squid.conf	260 B	-rw-r--r--	2023-04-01 14:40
squirrelmail.conf	191 B	-rw-r--r--	2023-04-01 14:40
sshd.conf	7.69 KB	-rw-r--r--	2023-04-01 14:40
stunnel.conf	363 B	-rw-r--r--	2023-04-01 14:40
suhosin.conf	649 B	-rw-r--r--	2023-04-01 14:40
tine20.conf	890 B	-rw-r--r--	2023-04-01 14:40
traefik-auth.conf	2.33 KB	-rw-r--r--	2023-04-01 14:40
uwimap-auth.conf	374 B	-rw-r--r--	2023-04-01 14:40
vsftpd.conf	637 B	-rw-r--r--	2023-04-01 14:40
webmin-auth.conf	444 B	-rw-r--r--	2023-04-01 14:40
wuftpd.conf	520 B	-rw-r--r--	2023-04-01 14:40
xinetd-fail.conf	521 B	-rw-r--r--	2023-04-01 14:40
znc-adminlog.conf	912 B	-rw-r--r--	2023-04-01 14:40
zoneminder.conf	1.12 KB	-rw-r--r--	2023-04-01 14:40

Rename

# Fail2Ban filter for asterisk authentication failures
#

[INCLUDES]

# Read common prefixes. If any customizations available -- read them from
# common.local
before = common.conf

[Definition]

_daemon = asterisk

__pid_re = (?:\s*\[\d+\])

iso8601 = \d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d+[+-]\d{4}

# All Asterisk log messages begin like this:
log_prefix= (?:NOTICE|SECURITY|WARNING)%(__pid_re)s:?(?:\[C-[\da-f]*\])?:? [^:]+:\d*(?:(?: in)? [^:]+:)?

prefregex = ^%(__prefix_line)s%(log_prefix)s <F-CONTENT>.+</F-CONTENT>$

failregex = ^Registration from '[^']*' failed for '<HOST>(:\d+)?' - (?:Wrong password|Username/auth name mismatch|No matching peer found|Not a local domain|Device does not match ACL|Peer is not supposed to register|ACL error $permit/deny$|Not a local domain)$
            ^Call from '[^']*' $(?:(?:TCP|UDP):)?<HOST>:\d+$ to extension '[^']*' rejected because extension not found in context
            ^(?:Host )?<HOST> (?:failed (?:to authenticate\b|MD5 authentication\b)|tried to authenticate with nonexistent user\b)
            ^No registration for peer '[^']*' $from <HOST>$$
            ^hacking attempt detected '<HOST>'$
            ^SecurityEvent="(?:FailedACL|InvalidAccountID|ChallengeResponseFailed|InvalidPassword)"(?:(?:,(?!RemoteAddress=)\w+="[^"]*")*|.*?),RemoteAddress="IPV[46]/[^/"]+/<HOST>/\d+"(?:,(?!RemoteAddress=)\w+="[^"]*")*$
            ^"Rejecting unknown SIP connection from <HOST>(?::\d+)?"$
            ^Request (?:'[^']*' )?from '(?:[^']*|.*?)' failed for '<HOST>(?::\d+)?'\s$callid: [^$]*\) - (?:No matching endpoint found|Not match Endpoint(?: Contact)? ACL|(?:Failed|Error) to authenticate)\s*$

# FreePBX (todo: make optional in v.0.10):
#            ^(%(__prefix_line)s|\[\]\s*WARNING%(__pid_re)s:?(?:\[C-[\da-f]*\])? )[^:]+: Friendly Scanner from <HOST>$

ignoreregex =

datepattern = {^LN-BEG}

# Author: Xavier Devlamynck / Daniel Black
#
# General log format - main/logger.c:ast_log
# Address format - ast_sockaddr_stringify
#
# First regex: channels/chan_sip.c
#
# main/logger.c:ast_log_vsyslog - "in {functionname}:" only occurs in syslog

journalmatch = _SYSTEMD_UNIT=asterisk.service

[lt_journal]

# asterisk can log timestamp if logs into systemd-journal (optional part matching this timestamp, gh-2383):
__extra_timestamp = (?:\[[^\]]+\]\s+)?
__prefix_line = %(known/__prefix_line)s%(__extra_timestamp)s