Imported Upstream version 2.7

[ossec-hids.git] / etc / rules / log-entries / 409

diff --git a/etc/rules/log-entries/409 b/etc/rules/log-entries/409
new file mode 100755 (executable)
index 0000000..753d169
--- /dev/null
+++ b/etc/rules/log-entries/409
@@ -0,0 +1,7 @@
+#FreeBSD
+Feb 15 14:32:20 freebsd-1 sshd[1374]: Illegal user dcid from 192.168.1.2
+Feb 15 16:11:56 freebsd-1 sshd[2690]: Illegal user dcid from 192.168.10.153
+Aug  1 15:44:10 enigma sshd[13752]: Failed password for invalid user ss7 from 65.202.215.2 port 18546 ssh2
+Aug  1 15:44:10 enigma sshd[6682]: Failed password for invalid user ss7 from 65.202.215.2 port 18546 ssh2
+Aug  1 15:44:11 enigma sshd[6682]: Failed password for invalid user ss7 from 65.202.215.2 port 18546 ssh2
+Aug  1 15:44:11 enigma sshd[13752]: Failed password for invalid user ss7 from 65.202.215.2 port 18546 ssh2