fail2ban/fail2ban — pull request #831 by alexcreek (2014-10-24 23:24:49+00:00)
Title: add zpanel-auth filter and jail

I've added a filter for the zpanel web hosting panel login page. When a login request fails, 'GET /?invalidlogin' is logged to the access log.

In zpanel's default configuration, it's apache vhost doesn't specify logging so the requests are sent to /var/log/apache2/other_vhosts_access.log as a default action. In this configuration, each log entry is prefixed with the respective vhost and listening port. The failregex checks for the vhost:port prefix as well as the traditional apache combined format.