From 79caeaa52024f31635adbae6b8d2b65f2127ba38 Mon Sep 17 00:00:00 2001
From: Mart124 <37041094+Mart124@users.noreply.github.com>
Date: Mon, 25 Nov 2019 22:05:29 +0100
Subject: [PATCH] Create bitwarden.conf

---
 config/filter.d/bitwarden.conf | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 config/filter.d/bitwarden.conf

diff --git a/config/filter.d/bitwarden.conf b/config/filter.d/bitwarden.conf
new file mode 100644
index 00000000..4cebcedf
--- /dev/null
+++ b/config/filter.d/bitwarden.conf
@@ -0,0 +1,9 @@
+# Fail2Ban filter for Bitwarden
+# Detecting failed login attempts
+# Logged in bwdata/logs/identity/Identity/log.txt
+
+[Init]
+datepattern = ^%%Y-%%m-%%d %%H:%%M:%%S
+
+[Definition]
+failregex = ^.*Failed login attempt(, 2FA invalid)\. <HOST>$