not banning

[prophoto]

I'm on CentOS 7 and it is not banning. Pretty sure the regex needs to be changed. Here is a log line from /var/log/messages. Maybe I can help you to get proper instructions for RedHat based distros?

Mar 10 03:00:59 aws6 jauthlog[28944]: [] WARNING login UNKNOWN ADMIN Username and password do not match or you do not have an account yet. from 84.114.116.188

[prophoto]

This seems to work

[Definition]
failregex =   .* WARNING login UNKNOWN ADMIN .* from <HOST>

[prophoto]

$ sudo fail2ban-regex /var/log/messages /etc/fail2ban/filter.d/joomla-admin.conf

Running tests
=============

Use   failregex filter file : joomla-admin, basedir: /etc/fail2ban/filter.d
Use         log file : /var/log/messages
Use         encoding : UTF-8


Results
=======

Failregex: 135 total
|-  #) [# of hits] regular expression
|   1) [135] .* WARNING login UNKNOWN ADMIN .* from <HOST>
`-

Ignoreregex: 0 total

Date template hits:
|- [# of hits] date format
|  [41177] (?:DAY )?MON Day 24hour:Minute:Second(?:\.Microseconds)?(?: Year)?
`-

Lines: 41177 lines, 0 ignored, 135 matched, 41042 missed
[processed in 3.03 sec]

Missed line(s): too many to print.  Use --print-all-missed to print all 41042 lines