#Sep 14 11:04:53 raquel sshd[8585]: Connection closed by 193.136.166.4
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 193.136.166.4$
#Sep 14 11:04:53 raquel sshd[8585]: Connection closed by 193.136.166.11
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 193.136.166.11$
#May 30 12:02:51 quiteria sshd[26035]: Connection closed by 193.136.128.5 [preauth]
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 193.136.128.5 \[preauth\]$
#2014-10-12T23:55:52.251092+01:00 mail4 sshd[31250]: Connection closed by 2001:690:2100:1::5:1 [preauth]
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 2001:690:2100:1::5:1 \[preauth\]$
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 2001:690:2100:1::5 \[preauth\]$
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 2001:690:2100:1::a428:5015 \[preauth\]$#May 30 12:09:13 quiteria sshd[26066]: Connection closed by 193.136.166.25 [preauth]
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 193.136.166.25 \[preauth\]$
#May 30 12:02:51 afs01 sshd[26035]: Connection closed by 193.136.132.129 [preauth]
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 193.136.132.129 \[preauth\]$
#IP do sistema de monitorização temporário do Tagus (NagiosQL)
#Dec 16 12:35:03 afs03 sshd[24059]: Connection closed by 193.136.102.201 [preauth]
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Connection closed by 193.136.102.201 \[preauth\]$



# Backups do tera
#2014-10-23T02:00:10.067531+01:00 mail4 sshd[17829]: Accepted publickey for backup from 2001:690:2100:2::7601:ad29 port 43036 ssh2
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Accepted publickey for backup from 2001:690:2100:2::7601:ad29 port [0-9]+ ssh2$
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Accepted publickey for backup from 193.136.132.6 port [0-9]+ ssh2$
#2014-10-22T02:00:12.885198+01:00 mail4 sshd[24344]: Received disconnect from 2001:690:2100:2::7601:ad29: 11: disconnected by user
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Received disconnect from 2001:690:2100:2::7601:ad29: 11: disconnected by user$
(^\w{3} [ :0-9]{11}|^[-:T.+0-9]+) [._[:alnum:]-]+ sshd\[[0-9]+\]: Received disconnect from 193.136.132.6: 11: disconnected by user$
