From c84494396be61896693f99c41348d00e34d86fb6 Mon Sep 17 00:00:00 2001
From: lostcontrol <lostcontrol@a942ae1a-1317-0410-a47c-b1dcaea8d605>
Date: Tue, 17 Jul 2007 20:41:00 +0000
Subject: [PATCH] - Added new regex for proftpd. Thanks to Vaclav Misek

git-svn-id: https://fail2ban.svn.sourceforge.net/svnroot/fail2ban/branches/FAIL2BAN-0_8@603 a942ae1a-1317-0410-a47c-b1dcaea8d605
---
 README                       | 2 +-
 config/filter.d/proftpd.conf | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/README b/README
index 73a0cd25..8df3d779 100644
--- a/README
+++ b/README
@@ -75,7 +75,7 @@ Nick Munger, Christoph Haas, Justin Shore, Joël Bertrand,
 René Berber, mEDI, Axel Thimm, Eric Gerbier, Christian Rauch,
 Michael C. Haller, Jonathan Underwood, Hanno 'Rince' Wagner,
 Daniel B. Cid, David Nutter, Raphaël Marichez, Guillaume
-Delvit
+Delvit, Vaclav Misek
 
 License:
 --------
diff --git a/config/filter.d/proftpd.conf b/config/filter.d/proftpd.conf
index 1fc31ef5..45b91c66 100644
--- a/config/filter.d/proftpd.conf
+++ b/config/filter.d/proftpd.conf
@@ -15,6 +15,7 @@
 # Values: TEXT
 #
 failregex = USER \S+: no such user found from \S* ?\[<HOST>\] to \S+\s*$
+            \(\S*\[<HOST>\]\) - USER \S+ \(Login failed\): Incorrect password.$
 
 # Option:  ignoreregex
 # Notes.:  regex to ignore. If this regex matches, the line is ignored.