abrown38andClaude Opus 5.5
d06bf8d531
Files and the journal, patterns with one <IP>, bounties within a window, bans in a Housecarl ban list with repeat offenders' bans growing; presets for sshd, jarl, housecarl, steward, bind-xfr, postfix-sasl, dovecot, nginx-auth and housecarl-drops; guard run/check/test/status/bans/ban/unban; a Debian package with a sandboxed unit; an end-to-end test with Housecarl. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
16 lines
1.3 KiB
Plaintext
16 lines
1.3 KiB
Plaintext
# Each line: the address a match should give (- for none), a tab, the log line.
|
|
203.0.113.9 Failed password for root from 203.0.113.9 port 51234 ssh2
|
|
203.0.113.9 Failed password for invalid user admin from 203.0.113.9 port 51234 ssh2
|
|
2001:db8::9 Failed publickey for git from 2001:db8::9 port 4022 ssh2
|
|
203.0.113.9 Oct 22 10:00:01 web sshd-session[1234]: Failed password for invalid user oracle from 203.0.113.9 port 4022 ssh2
|
|
203.0.113.9 Invalid user test from 203.0.113.9 port 40022
|
|
203.0.113.9 Connection closed by invalid user admin 203.0.113.9 port 40022 [preauth]
|
|
203.0.113.9 Disconnected from authenticating user root 203.0.113.9 port 40022 [preauth]
|
|
203.0.113.9 error: maximum authentication attempts exceeded for root from 203.0.113.9 port 40022 ssh2 [preauth]
|
|
203.0.113.9 Unable to negotiate with 203.0.113.9 port 40022: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1
|
|
203.0.113.9 banner exchange: Connection from 203.0.113.9 port 40022: invalid format
|
|
203.0.113.10 Failed password for invalid user x from 198.51.100.1 port 22 from 203.0.113.10 port 4444 ssh2
|
|
- Accepted publickey for adam from 10.0.10.20 port 51000 ssh2: ED25519 SHA256:xyz
|
|
- Received disconnect from 203.0.113.9 port 40022:11: disconnected by user
|
|
- Server listening on 0.0.0.0 port 22.
|