fail2ban not blocking vsftp
 

Am using fail2ban to block ftp loggins but it doesnt seem to stop certain tries like
user unknown
Any help with the regex will be appreciated, the ssh part is working great though.

temporary solution
 

i was able to get a temporary solution to my problem by editing vftpd.conf and blocking everyone apart from those on the user_list, these brought down the number of forced ftp attempts to zero on the server for the last 4 days, but i do believe i will still have the same problem if a bot tried to log in with a valid username.
So in the meantime i will try to find a regex to do the job properly. Thanks all.
Any help will still be appreciated in finding a better regex.