# Fail2ban filter for SQL injection attempts
[Definition]
failregex = ^<HOST>.*"(union|select|insert|cast|set|declare|drop|update|delete|exec|script|alert|eval|base64|decode).*HTTP.*".*$
ignoreregex =