title: fail2ban find a apache regex
body: <p>I am trying to setup fail2ban and fail with the regex... in my apache logs I have lines like this</p>
  
  <pre><code>xxx.xxx.xxx.xxx - - [27/Sep/2013:12:41:21 +0200] "GET /shop/index.php?do=/blog/add HTTP/1.1" 301 566 "http://www.tld.com/shop/" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;)"
  </code></pre>
  
  <p>All of these entries have in common the "?do=" which is not valid at all (so no regular pages will be affected)
  I tried to catch it with a regex like</p>
  
  <pre><code>failregex = &lt;HOST&gt; - - * "GET *\?do\=* 
  </code></pre>
  
  <p>but it gives no match.
  After several hours of searchig I am lost. Anyone can help me with the regex?</p>