fredrik/logcheck
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Nya regler

Browse Source
This commit is contained in:
fredrik
2017-11-07 11:21:59 +01:00
parent a0fc495d4c
commit 7732051fc5
3 changed files with 30 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
logcheck_ubuntu
View File

@@ -63,6 +63,14 @@
\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ mosquitto\[[[:digit:]]+\]:
#
# MOTD
#
#Nov 7 10:35:56 marconi 50-motd-news[31369]: * Ubuntu 17.10 releases with Gnome, Kubernetes 1.8, and minimal
#Nov 7 10:35:56 marconi 50-motd-news[31369]: base images
#Nov 7 10:35:56 marconi 50-motd-news[31369]: - https://ubu.one/u1710
\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ 50-motd-news\[[[:digit:]]+\]:
#
# NAMED
@@ -119,7 +127,9 @@
#Mar 9 05:42:53 marconi sshd[6125]: fatal: Unable to negotiate with 84.241.42.101 port 61319: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman#Sep 9 10:56:11 marconi sshd[2798]: fatal: Unable to negotiate with 54.156.158.234 port 41078: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth]
#Sep 9 10:56:12 marconi sshd[2802]: fatal: Unable to negotiate with 54.156.158.234 port 41330: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth]
#Sep 9 10:56:14 marconi sshd[2816]: fatal: Unable to negotiate with 54.156.158.234 port 42036: no matching host key type found. Their offer: ssh-dss [preauth]-group-exchange-sha1 [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: fatal: Unable to negotiate with [.:[:digit:]]+ port [.:[:digit:]]+: no matching (host key type|key exchange method) found. Their offer: [-,[:alnum:]]+ \[preauth\]
#Nov 7 10:50:46 marconi sshd[3881]: Unable to negotiate with 173.255.227.186 port 51816: no matching host key type found. Their offer: ssh-dss [preauth]
OA
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]:( fatal:)? Unable to negotiate with [.:[:digit:]]+ port [.:[:digit:]]+: no matching (host key type|key exchange method) found. Their offer: [-,[:alnum:]]+ \[preauth\]
#Mar 2 20:51:23 marconi sshd[8330]: error: maximum authentication attempts exceeded for invalid user admin from 182.45.153.221 port 54407 ssh2 [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: error: maximum authentication attempts exceeded for invalid user [[:alnum:]]+ from [.:[:digit:]]+ port [.:[:digit:]]+ ssh2 \[preauth\]