fredrik/logcheck
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Ny ssh-regel

Browse Source
This commit is contained in:
fredrik
2017-11-13 10:31:42 +01:00
parent 0bb47218af
commit cb0288fe6c
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
logcheck_ubuntu
View File

@@ -106,7 +106,11 @@
#Mar 2 17:00:24 marconi sshd[556]: Connection reset by 119.147.115.37 port 1841 [preauth]
#Mar 2 17:07:35 marconi sshd[2635]: Connection reset by 119.147.115.37 port 1070 [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Connection reset by [.:[:digit:]]+ port [.:[:digit:]]+ \[preauth\]
#Nov 13 10:02:01 marconi sshd[675]: Connection reset by authenticating user root 27.148.158.148 port 3403 [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Connection reset by( authenticating user [[:alnum:]]+)? [.:[:digit:]]+ port [.:[:digit:]]+ \[preauth\]
#Mar 2 17:04:13 marconi sshd[1368]: Disconnecting: Too many authentication failures [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Disconnecting: Too many authentication failures \[preauth\]

1
testlog
View File

@@ -617,6 +617,7 @@ Nov 7 10:35:56 marconi 50-motd-news[31369]: base images
Nov 7 10:35:56 marconi 50-motd-news[31369]: - https://ubu.one/u1710
Nov 7 10:50:46 marconi sshd[3881]: Unable to negotiate with 173.255.227.186 port 51816: no matching host key type found. Their offer: ssh-dss [preauth]
Nov 13 06:05:46 marconi nmbd[5134]: Packet send failed to 172.18.255.255(138) ERRNO=Ogiltigt argument
Nov 13 10:02:01 marconi sshd[675]: Connection reset by authenticating user root 27.148.158.148 port 3403 [preauth]
Aug 23 18:39:24 nada fredrik[1713]: Kontrollrad. Syns detta har vi problem...