From 8a1ea78c767c14e667bff6d698b2b5706650dc76 Mon Sep 17 00:00:00 2001 From: Jonas Smedegaard Date: Sun, 11 Dec 2005 23:19:14 +0000 Subject: Ignore failed SSH login. --- logcheck/ignore.d.server/tmp | 2 ++ 1 file changed, 2 insertions(+) (limited to 'logcheck/ignore.d.server/tmp') diff --git a/logcheck/ignore.d.server/tmp b/logcheck/ignore.d.server/tmp index 33cddeb..b2dc9e0 100644 --- a/logcheck/ignore.d.server/tmp +++ b/logcheck/ignore.d.server/tmp @@ -60,3 +60,5 @@ ## Misc entries on Gibraltar (using older logcheck and syslog...) ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ -- MARK -- $ ^\w{3} [ :0-9]{11} [._[:alnum:]-]+ /USR/SBIN/CRON\[[0-9]+\]: \(root\) CMD \(test -x /usr/sbin/logcheck && nice -n10 /usr/sbin/logcheck\) $ +## SSH +^\w{3} [ :0-9]{11} [._[:alnum:]-]+ sshd\[[0-9]+\]: Failed password for illegal user [^[:space:]]+ from [.0-9]+ port [0-9]+ ssh2$ -- cgit v1.2.3