From 260bd745cd3749b2d6fef6d855f537ce64012a37 Mon Sep 17 00:00:00 2001 From: Anton Khirnov Date: Mon, 28 Sep 2020 15:14:46 +0200 Subject: sshban: handle more messages --- sshban.py | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/sshban.py b/sshban.py index 11b5d4b..82d0d5c 100755 --- a/sshban.py +++ b/sshban.py @@ -34,9 +34,14 @@ regexes = { r'^Failed password .* from (\S+)', r'^PAM .* authentication failure .* rhost=(\S+)', r'^error: maximum authentication attempts exceeded\b.* from (\S+)', + r'^banner exchange: Connection from (\S+) port \d+: invalid format', ], IFF_GRAY : [ r'^Received disconnect from (\S+)', + r'^Connection reset by (\S+) port \d+', + r'^Connection closed by authenticating user \S+ (\S+) port \d+ \[preauth\]', + r'^Connection closed by (\S+) port \d+ \[preauth\]', + r'^Unable to negotiate with (\S+) port \d+: no matching key exchange method found.', ] } -- cgit v1.2.3