From 860a20ec1d0ab793aa50ac18144ebbd453253e1b Mon Sep 17 00:00:00 2001 From: Fredrik Wahlberg Date: Thu, 30 Nov 2017 09:00:36 +0100 Subject: [PATCH] Mer ssh --- logcheck_ubuntu | 3 +++ testlog | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/logcheck_ubuntu b/logcheck_ubuntu index 40de1e0..6095cd8 100644 --- a/logcheck_ubuntu +++ b/logcheck_ubuntu @@ -153,6 +153,9 @@ OA #Nov 2 13:11:27 marconi sshd[31688]: Disconnecting invalid user admin 114.97.151.158 port 40382: Too many authentication failures [preauth] ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Disconnecting (invalid|authenticating) user [[:alnum:]]+ [.:[:digit:]]+ port [.:[:digit:]]+: Too many authentication failures \[preauth\] +#Nov 30 06:02:55 marconi sshd[23738]: error: Received disconnect from 103.99.0.207 port 63247:14: No more user authentication methods available. [preauth] +^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: error: Received disconnect from [.:[:digit:]]+ port [.:[:digit:]]+: No more user authentication methods available. \[preauth\] + # # SYSTEMD # diff --git a/testlog b/testlog index 8c6fd08..470a163 100644 --- a/testlog +++ b/testlog @@ -625,7 +625,7 @@ Nov 14 08:21:59 marconi systemd-resolved[24610]: Negative trust anchors: 10.in-a Nov 14 08:21:59 marconi systemd-resolved[24610]: Using system hostname 'marconi'. Nov 16 12:17:46 marconi sshd[32197]: Invalid user cloud-user from 115.47.122.242 port 6920 Nov 16 12:17:47 marconi sshd[32197]: Connection closed by invalid user cloud-user 115.47.122.242 port 6920 [preauth] - +Nov 30 06:02:55 marconi sshd[23738]: error: Received disconnect from 103.99.0.207 port 63247:14: No more user authentication methods available. [preauth] Aug 23 18:39:24 nada fredrik[1713]: Kontrollrad. Syns detta har vi problem... Aug 23 18:39:24 nada fredrik[1713]: Sista raden