[Definition]
failregex = ^%(__prefix_line)s(?:error: )?Received disconnect from <HOST> port \d+: .* \[preauth\]$
            ^%(__prefix_line)sInvalid user .* from <HOST> port \d+ \[preauth\]$
            ^%(__prefix_line)sFailed publickey for .* from <HOST> port \d+ ssh2$
            ^%(__prefix_line)sConnection closed by (invalid user )?.* <HOST> port \d+ \[preauth\]$

ignoreregex =