Because the IP address of the computer that's "attacking" you is the most
vital piece of information. So, when fail2ban scans your log files, it only
wants to look at lines that have an IP address in it.
So: "host" actually means "the IP address of the other person's computer".
Sometimes the language can be confusing!
If you look at the really big log file line that you posted, the "host" -
the IP address of the other computer - was the first thing in the log line.
On Fri, 10 Aug 2018 at 18:38, Wayne Sallee <[email protected]> wrote:
> Why is host required?
>
> Wayne Sallee
> [email protected]
> http://www.WayneSallee.com
>
> On 08/10/2018 01:15 PM, Tony Collins wrote:
>
> The failregex I just gave you will work for it - you can test it like this:
>
> fail2ban-regex logfile.log "<HOST>.*JDatabaseDriverMysql"
> --print-all-matched
>
> Just replace logfile.log with the filename that has the offending log line
> in it
>
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> _______________________________________________
> Fail2ban-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/fail2ban-users
>
--
-- Tony Collins
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Fail2ban-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fail2ban-users
