diff options
| author | Jonas Smedegaard <dr@jones.dk> | 2005-12-11 23:19:14 +0000 |
|---|---|---|
| committer | Jonas Smedegaard <dr@jones.dk> | 2005-12-11 23:19:14 +0000 |
| commit | 8a1ea78c767c14e667bff6d698b2b5706650dc76 (patch) | |
| tree | ce1234a89c6197974a5b91ff49be93634ab896b6 /logcheck/ignore.d.server/tmp | |
| parent | ede3bfa3967218bad9f5fca5f47a4107cbde3b31 (diff) | |
Ignore failed SSH login.
Diffstat (limited to 'logcheck/ignore.d.server/tmp')
| -rw-r--r-- | logcheck/ignore.d.server/tmp | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/logcheck/ignore.d.server/tmp b/logcheck/ignore.d.server/tmp index 33cddeb..b2dc9e0 100644 --- a/logcheck/ignore.d.server/tmp +++ b/logcheck/ignore.d.server/tmp @@ -60,3 +60,5 @@ ## Misc entries on Gibraltar (using older logcheck and syslog...) ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ -- MARK -- $ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \(root\) CMD \(test -x /usr/sbin/logcheck && nice -n10 /usr/sbin/logcheck\) $ +## SSH +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed password for illegal user [^[:space:]]+ from [.0-9]+ port [0-9]+ ssh2$ |