From 2ec5c5e368a52d388048bd3e14fa179b5b869731 Mon Sep 17 00:00:00 2001 From: Fredrik Wahlberg Date: Thu, 28 Mar 2024 21:11:52 +0100 Subject: [PATCH] Bye --- logcheck-fw-sshd | 4 +++- testlog | 3 ++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/logcheck-fw-sshd b/logcheck-fw-sshd index a6ace86..9b71267 100644 --- a/logcheck-fw-sshd +++ b/logcheck-fw-sshd @@ -17,7 +17,9 @@ # Feb 28 03:09:57 nada sshd[30462]: Received disconnect from 47.89.188.218: 3: com.jcraft.jsch.JSchException: Auth cancel [preauth] #Mar 3 21:19:31 marconi sshd[17576]: error: Received disconnect from 212.83.160.203 port 57458:3: com.jcraft.jsch.JSchException: Auth cancel [preauth] #Mar 19 04:36:45 marconi sshd[26598]: error: Received disconnect from 46.165.220.212 port 52999:13: User request [preauth] -^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]:( error:)? Received disconnect from [.:[:digit:]]+( port [[:digit:]]+:|: )(3|13): (java.net.SocketTimeoutException|com.jcraft.jsch.JSchException|User request)(: )?(reject HostKey: [.:[:digit:]]+|Auth fail|Read timed out|Auth cancel)? \[preauth\] +#Mar 27 21:52:08 nada sshd[31920]: Received disconnect from 212.70.149.150 port 19201:11: Bye [preauth] +#Mar 27 23:07:45 nada sshd[951]: Received disconnect from 212.70.149.150 port 36664:11: Bye [preauth] +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]:( error:)? Received disconnect from [.:[:digit:]]+( port [[:digit:]]+:|: )(3|11|13): (java.net.SocketTimeoutException|com.jcraft.jsch.JSchException|User request|Bye)(: )?(reject HostKey: [.:[:digit:]]+|Auth fail|Read timed out|Auth cancel)? \[preauth\] #Mar 26 16:18:46 nada sshd[3298]: Received disconnect from 91.193.74.33: 11: Bye [preauth] #Apr 7 13:59:42 nada sshd[19013]: Received disconnect from 2.234.148.20: 11: ok [preauth] diff --git a/testlog b/testlog index 519d789..4c9d423 100644 --- a/testlog +++ b/testlog @@ -784,6 +784,7 @@ Jan 20 06:49:10 nada named[256]: client @0xf1e2aeb0 155.4.86.220#37125/key fredr Jan 20 08:06:05 nada dbus-daemon[240]: [system] Reloaded configuration Jan 20 19:12:46 nada named[256]: client @0xf20be340 45.148.10.241#23353 (e\003co): query failed (REFUSED) for e\003co/IN/ANY at query.c:5560 Jan 21 09:45:23 nada sshd[14807]: error: kex_protocol_error: type 20 seq 2 [preauth] - +Mar 27 21:52:08 nada sshd[31920]: Received disconnect from 212.70.149.150 port 19201:11: Bye [preauth] +Mar 27 23:07:45 nada sshd[951]: Received disconnect from 212.70.149.150 port 36664:11: Bye [preauth] Aug 23 18:39:24 nada fredrik[1713]: Kontrollrad. Syns detta har vi problem... Aug 23 18:39:24 nada fredrik[1713]: Sista raden