[Definition]
failregex = ^\S+ <ADDR> - - \[[^\]]*\] "[^"]+" 400