[Fail2ban-users] Help with regex

[Dionisios K. <ad...@vo...>]

Hello, i want to make fail2ban monitor webmin.

1) Known user, wrong password

Nov 25 20:05:27 machine.host perl[9172]: pam_unix(webmin:auth):
authentication failure; logname= uid=0 euid=0 tty=10000 ruser=
rhost=123.123.123.123 user=root
Nov 25 20:05:29 machine.host webmin[9172]: Invalid login as root from
123.123.123.123

2) Unknown user.
Nov 25 20:13:40 machine.host webmin[9242]: Non-existent login as
someunknownuser from 123.123.123.123

Is possible to help me with the correct regex?

You may also add it as configuration inside fail2ban as webmin is popular.

Sincerely,