From 0ace847121754dc99e696df1569f296f8daea18b Mon Sep 17 00:00:00 2001 From: Anton Khirnov Date: Wed, 22 Jun 2022 15:37:33 +0200 Subject: sshban: add more lines observed in the wild --- sshban.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/sshban.py b/sshban.py index 82d0d5c..98329b1 100755 --- a/sshban.py +++ b/sshban.py @@ -35,6 +35,8 @@ regexes = { r'^PAM .* authentication failure .* rhost=(\S+)', r'^error: maximum authentication attempts exceeded\b.* from (\S+)', r'^banner exchange: Connection from (\S+) port \d+: invalid format', + r'^ssh_dispatch_run_fatal: Connection from (\S+) port \d+: message authentication code incorrect \[preauth\]', + r'^ssh_dispatch_run_fatal: Connection from (\S+) port \d+: Connection corrupted \[preauth\]', ], IFF_GRAY : [ r'^Received disconnect from (\S+)', -- cgit v1.2.3