fredrik/logcheck
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Mer ssh

Browse Source
This commit is contained in:
fredrik
2017-11-30 09:00:36 +01:00
parent 5d0e1642bc
commit 860a20ec1d
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
logcheck_ubuntu
View File

@@ -153,6 +153,9 @@ OA
#Nov 2 13:11:27 marconi sshd[31688]: Disconnecting invalid user admin 114.97.151.158 port 40382: Too many authentication failures [preauth] #Nov 2 13:11:27 marconi sshd[31688]: Disconnecting invalid user admin 114.97.151.158 port 40382: Too many authentication failures [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Disconnecting (invalid|authenticating) user [[:alnum:]]+ [.:[:digit:]]+ port [.:[:digit:]]+: Too many authentication failures \[preauth\] ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Disconnecting (invalid|authenticating) user [[:alnum:]]+ [.:[:digit:]]+ port [.:[:digit:]]+: Too many authentication failures \[preauth\]
#Nov 30 06:02:55 marconi sshd[23738]: error: Received disconnect from 103.99.0.207 port 63247:14: No more user authentication methods available. [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: error: Received disconnect from [.:[:digit:]]+ port [.:[:digit:]]+: No more user authentication methods available. \[preauth\]
# #
# SYSTEMD # SYSTEMD
# #

2
testlog
View File

@@ -625,7 +625,7 @@ Nov 14 08:21:59 marconi systemd-resolved[24610]: Negative trust anchors: 10.in-a
Nov 14 08:21:59 marconi systemd-resolved[24610]: Using system hostname 'marconi'. Nov 14 08:21:59 marconi systemd-resolved[24610]: Using system hostname 'marconi'.
Nov 16 12:17:46 marconi sshd[32197]: Invalid user cloud-user from 115.47.122.242 port 6920 Nov 16 12:17:46 marconi sshd[32197]: Invalid user cloud-user from 115.47.122.242 port 6920
Nov 16 12:17:47 marconi sshd[32197]: Connection closed by invalid user cloud-user 115.47.122.242 port 6920 [preauth] Nov 16 12:17:47 marconi sshd[32197]: Connection closed by invalid user cloud-user 115.47.122.242 port 6920 [preauth]
Nov 30 06:02:55 marconi sshd[23738]: error: Received disconnect from 103.99.0.207 port 63247:14: No more user authentication methods available. [preauth]
Aug 23 18:39:24 nada fredrik[1713]: Kontrollrad. Syns detta har vi problem... Aug 23 18:39:24 nada fredrik[1713]: Kontrollrad. Syns detta har vi problem...
Aug 23 18:39:24 nada fredrik[1713]: Sista raden Aug 23 18:39:24 nada fredrik[1713]: Sista raden