fail2ban openfire
#vim filter.d/openfire.conf
[INCLUDES]
before = common.conf[Definition]
failregex = ^ WARN.*org.jivesoftware.admin.LoginLimitManager – Failed admin console login attempt by admin from
$ ignoreregex =
[Init]
datepattern = ^%%Y.%%m.%%d %%H:%%M:%%S
vim jail.conf
[openfire]
enabled = true
filter = openfire
action = iptables-allports[]
logpath = /opt/openfire/logs/all.log