access.log I got somerow a
ip - - [date] method link ... etc..
and some others with
www.domain.com:ip - - [date] method link ... etc..
I am actually using this regexp
The problem is that It causes that fail2ban uses as ip the reverse lookup of www.domain.com when parsing the second kind of rows.
Is there a more precise regexp for ip and not host name?