← Back to branch summary

~ubuntu-branches/ubuntu/vivid/fail2ban/vivid

« back to all changes in this revision

Viewing changes to .pc/changeset_d4f6ca4f8531f332bcb7ce3a89102f60afaaa08e.diff/testcases/files/logs/proftpd

  • Committer: Package Import Robot
  • Author(s): Yaroslav Halchenko
  • Date: 2013-11-17 17:29:06 UTC
  • mfrom: (1.2.9)
  • Revision ID: package-import@ubuntu.com-20131117172906-buaklkz2i416bh04
Tags: 0.8.11-1
http://bugs.debian.org/719662
http://bugs.debian.org/668064
http://bugs.debian.org/696087
http://bugs.debian.org/709196
http://bugs.debian.org/620760
http://bugs.debian.org/711463
http://bugs.debian.org/648276
* Fresh upstream release
  - this release tightens all shipped filters to preclude
    possible injections leading to targetted DoS attacks.
  - omitted entry for ~pre release changelog:
    - asterisk filter was fixed (Closes: #719662),
    - nginx filter/jail added (Closes: #668064)
    - better detection of log rotation in polling backend (Closes: #696087)
    - includes sever name (uname -n) into subject of sendmail actions
      (Closes: #709196)
* debian/jail.conf
  - dropbear jail: use dropbear filter (instead of ssh) and monitor
    auth.log instead of non-existing /var/log/dropbear (Closes: #620760)
* debian/NEWS
  - information for change of default iptables action to REJECT now
    (Closes: #711463)
* debian/patches
  - changeset_d4f6ca4f8531f332bcb7ce3a89102f60afaaa08e.diff
    post-release change to support native proftpd date format which
    includes milliseconds (Closes: #648276)
  - changeset_ac061155f093464fb6cd2329d3d513b15c68e256.diff
    absorbed upstream

Show diffs side-by-side

added added

removed removed

Lines of Context:
.pc/changeset_d4f6ca4f8531f332bcb7ce3a89102f60afaaa08e.diff/testcases/files/logs/proftpd
 
1
# failJSON: { "time": "2005-01-10T00:00:00", "match": true , "host": "123.123.123.123" }
 
2
Jan 10 00:00:00 myhost proftpd[12345] myhost.domain.com (123.123.123.123[123.123.123.123]): USER username (Login failed): User in /etc/ftpusers
 
3
# failJSON: { "time": "2005-02-01T00:00:00", "match": true , "host": "123.123.123.123" }
 
4
Feb 1 00:00:00 myhost proftpd[12345] myhost.domain.com (123.123.123.123[123.123.123.123]): USER username: no such user found from 123.123.123.123 [123.123.123.123] to 234.234.234.234:21 
 
5
# failJSON: { "time": "2005-06-09T07:30:58", "match": true , "host": "67.227.224.66" }
 
6
Jun 09 07:30:58 platypus.ace-hosting.com.au proftpd[11864] platypus.ace-hosting.com.au (mail.bloodymonster.net[::ffff:67.227.224.66]): USER username (Login failed): Incorrect password.
 
7
# failJSON: { "time": "2005-06-09T11:15:43", "match": true , "host": "101.71.143.238" }
 
8
Jun 09 11:15:43 platypus.ace-hosting.com.au proftpd[17424] platypus.ace-hosting.com.au (::ffff:101.71.143.238[::ffff:101.71.143.238]): USER god: no such user found from ::ffff:101.71.143.238 [::ffff:101.71.143.238] to ::ffff:123.212.99.194:21
 
9
# failJSON: { "time": "2005-06-13T22:07:23", "match": true , "host": "59.167.242.100" }
 
10
Jun 13 22:07:23 platypus.ace-hosting.com.au proftpd[15719] platypus.ace-hosting.com.au (::ffff:59.167.242.100[::ffff:59.167.242.100]): SECURITY VIOLATION: root login attempted.
 
11
# failJSON: { "time": "2005-06-14T00:09:59", "match": true , "host": "59.167.242.100" }
 
12
Jun 14 00:09:59 platypus.ace-hosting.com.au proftpd[17839] platypus.ace-hosting.com.au (::ffff:59.167.242.100[::ffff:59.167.242.100]): USER platypus.ace-hosting.com.au proftpd[17424] platypus.ace-hosting.com.au (hihoinjection[1.2.3.44]): no such user found from ::ffff:59.167.242.100 [::ffff:59.167.242.100] to ::ffff:113.212.99.194:21
 
13
# failJSON: { "time": "2005-05-31T10:53:25", "match": true , "host": "1.2.3.4" }
 
14
May 31 10:53:25 mail proftpd[15302]: xxxxxxxxxx (::ffff:1.2.3.4[::ffff:1.2.3.4]) - Maximum login attempts (3) exceeded 
 
15
# failJSON: { "time": "2004-12-05T15:44:32", "match": true , "host": "1.2.3.4" }
 
16
Dec 5 15:44:32 serv1 proftpd[70944]: serv1.domain.com (example.com[1.2.3.4]) - USER jtittle@domain.org: no such user found from example.com [1.2.3.4] to 1.2.3.4:21