changeset 203:6813609829e3 puppet-3.6

Blacklist more usernames no-one will ever log in with
author IBBoard <dev@ibboard.co.uk>
date Wed, 29 May 2019 19:51:42 +0100
parents 1b93429d28b8
children 1901cf7bac55
files common/fail2ban/ibb-sshd-bad-user.conf
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line diff
     1.1 --- a/common/fail2ban/ibb-sshd-bad-user.conf	Mon May 27 20:08:57 2019 +0100
     1.2 +++ b/common/fail2ban/ibb-sshd-bad-user.conf	Wed May 29 19:51:42 2019 +0100
     1.3 @@ -10,7 +10,7 @@
     1.4  #          (?:::f{4,6}:)?(?P<host>[\w\-.^_]+)
     1.5  # Values:  TEXT
     1.6  #
     1.7 -failregex = Failed password for invalid user ([0-9a-z][0-9a-z]?|ec2-user|postgres|oracle|nagios|git(olit|lab)?|ftpuser|hadoop|zabbix|student|ubuntu|teamspeak3?|ts3(server|bot)?|jsboss|guest|csgo(server|srv)|minecraft|tomcat|applmgr|usuario|nexus|weblogic|vagrant|zimbra|jira|vyatta|qhsupport|cemergen|redmine|sinusbot|debian|asterisk|aptproxy|facebook|linode|kodi|mongodb|oraprod|proftpd|weblogic|harvard|www(admin|run|user)|uuu|sshd[0-9]*|squid|write|rpcuser|WinD3str0y) from <HOST> port [0-9]+ ssh2
     1.8 +failregex = Failed password for invalid user ([0-9a-z][0-9a-z]?|ec2-user|postgres|oracle|nagios|git(olit|lab)?|ftpuser|hadoop|zabbix|student|ubuntu|teamspeak3?|ts3(server|bot)?|jsboss|guest|csgo(server|srv)|minecraft|tomcat|applmgr|usuario|nexus|weblogic|vagrant|zimbra|jira|vyatta|qhsupport|cemergen|redmine|sinusbot|debian|asterisk|aptproxy|facebook|linode|kodi|mongodb|oraprod|proftpd|weblogic|harvard|www(admin|run|user)|uuu|sshd[0-9]*|squid|write|rpcuser|WinD3str0y|sshusr|devteam|gmail|inssftp|master|nfsnobody) from <HOST> port [0-9]+ ssh2
     1.9  
    1.10  # Option:  ignoreregex
    1.11  # Notes.:  regex to ignore. If this regex matches, the line is ignored.