You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
|
|
# set: defscore=15
|
|
|
|
|
User [[:print:]]+ from <HOST> not allowed because listed in DenyUsers
|
|
|
|
|
User [[:print:]]+ from <HOST> not allowed because a group is listed in DenyGroups
|
|
|
|
|
# set: defscore=10
|
|
|
|
|
User [[:print:]]+ from <HOST> not allowed because not listed in AllowUsers
|
|
|
|
|
User [[:print:]]+ from <HOST> not allowed because not in any group
|
|
|
|
|
User [[:print:]]+ from <HOST> not allowed because none of user's groups are listed in AllowGroups
|
|
|
|
|
[Aa]uthentication failure for .* from <HOST>( via [[:print:]]*)?
|
|
|
|
|
[Aa]uthentication error for .* from <HOST>( via [[:print:]]*)?
|
|
|
|
|
Failed password for .* from <HOST>
|
|
|
|
|
# set: defscore=5
|
|
|
|
|
User not known to the underlying authentication module for .* from <HOST>
|
|
|
|
|
Invalid user [[:print:]]+ from <HOST>
|
|
|
|
|
# set: defscore=3
|
|
|
|
|
refused connect from [[:print:]]+ \(<HOST>\)
|
|
|
|
|
Did not receive identification string from <HOST>
|
|
|
|
|
Connection closed by <HOST>( port [0-9]+)? \[preauth\]
|
|
|
|
|
Connection closed by authenticating user [[:print:]]+ <HOST> port [0-9]+ \[preauth\]
|
|
|
|
|
banner exchange: Connection from <HOST> port [0-9]+: invalid format
|
