Files
zira-etc/crowdsec/patterns/mysql
2023-06-12 09:31:52 +03:00

2 lines
160 B
Plaintext

MYSQL_AUTH_FAIL %{TIMESTAMP_ISO8601:time} %{NUMBER} \[Note\] Access denied for user '%{DATA:user}'@'%{IP:source_ip}' \(using password: %{WORD:using_password}\)