Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add some more sshd weeds to the logs.

Browse source
This commit is contained in:
Kevin Fenzi 2015-12-02 02:49:30 +00:00
parent 284690cd5b
commit 5579bed478
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
roles/epylog/files/merged/weed_local.cf
View file

@ -293,6 +293,10 @@ sshd.*: pam_succeed_if\(sshd:auth\): requirement.*
sshd.*: pam_unix\(sshd:auth\): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=.* sshd.*: pam_unix\(sshd:auth\): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=.*
sshd.*: PAM .* more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=.* sshd.*: PAM .* more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=.*
sshd.*: pam_unix\(sshd:auth\): check pass; user unknown sshd.*: pam_unix\(sshd:auth\): check pass; user unknown
sshd.*: error: maximum authentication attempts exceeded for.*from.*port.*ssh2 [preauth]
sshd.*: Disconnecting: Too many authentication failures [preauth]
sshd.*: Disconnected from.*
sshd.*: Read error from remote host.*
stunnel:.*connected remote.* stunnel:.*connected remote.*
stunnel:.*SSL_read.* stunnel:.*SSL_read.*
stunnel:.*Connection reset.* stunnel:.*Connection reset.*