sshban: handle more messages

1 files changed, 5 insertions, 0 deletions

diff --git a/sshban.py b/sshban.py
index 11b5d4b..82d0d5c 100755
--- a/sshban.py
+++ b/sshban.py
@@ -34,9 +34,14 @@ regexes = {
         r'^Failed password .* from (\S+)',
         r'^PAM .* authentication failure .* rhost=(\S+)',
         r'^error: maximum authentication attempts exceeded\b.* from (\S+)',
+        r'^banner exchange: Connection from (\S+) port \d+: invalid format',
     ],
     IFF_GRAY : [
         r'^Received disconnect from (\S+)',
+        r'^Connection reset by (\S+) port \d+',
+        r'^Connection closed by authenticating user \S+ (\S+) port \d+ \[preauth\]',
+        r'^Connection closed by (\S+) port \d+ \[preauth\]',
+        r'^Unable to negotiate with (\S+) port \d+: no matching key exchange method found.',
     ]
 }