fredrik/logcheck
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Ny ssh-regel

Browse Source
This commit is contained in:
fredrik
2017-11-13 10:31:42 +01:00
parent 0bb47218af
commit cb0288fe6c
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
logcheck_ubuntu
View File

@@ -106,7 +106,11 @@
#Mar 2 17:00:24 marconi sshd[556]: Connection reset by 119.147.115.37 port 1841 [preauth]
#Mar 2 17:07:35 marconi sshd[2635]: Connection reset by 119.147.115.37 port 1070 [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Connection reset by [.:[:digit:]]+ port [.:[:digit:]]+ \[preauth\]
#Nov 13 10:02:01 marconi sshd[675]: Connection reset by authenticating user root 27.148.158.148 port 3403 [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Connection reset by( authenticating user [[:alnum:]]+)? [.:[:digit:]]+ port [.:[:digit:]]+ \[preauth\]
#Mar 2 17:04:13 marconi sshd[1368]: Disconnecting: Too many authentication failures [preauth]
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Disconnecting: Too many authentication failures \[preauth\]