[Fail2ban-users] Issues while trying to block failed login on ownCloud with fail2ban

[Chris <fis...@gm...>]

Hi list,

i'm currently running fail2ban 0.8.13-1 on Debian Jessie and trying to
use it to ban failed logins on ownCloud 8.0.3. The following pastebin
contains all done configurations as well as the successful output of
fail2ban-regex and a log sample from a failed ownCloud login:

http://pastebin.com/q1EuMgYg

Unfortunately it seems that fail2ban-server is not detecting the failed
logins from the owncloud.log when logging into the GUI with wrong
credentials  (maxretry is currently set to 3 as a default).

There are other fail2ban jails like dovecot or ssh banning failed logins
without any problems. The main difference between those jails and the
ownCloud one are the different time/date detected by fail2ban-regex:

dovecot:
[14821] MONTH Day Hour:Minute:Second

owncloud:
[725] ISO 8601

I'm currently completely stuck how to debug this further to see why
fail2ban-regex is successfully where fail2ban-server is failing.

Thanks in advance for a reply / hints.

-- 
Chris