From 0d1bdf84e17de4802f83a3e99baecde67a3186e8 Mon Sep 17 00:00:00 2001
From: Daniel Lysfjord <lysfjord.daniel@smokepit.net>
Date: Thu, 24 Jul 2025 22:58:40 +0200
Subject: [PATCH] Add support for timeout before authentication message

---
 lib/ssh_parser.pm | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/lib/ssh_parser.pm b/lib/ssh_parser.pm
index bd3147b..6cef5db 100644
--- a/lib/ssh_parser.pm
+++ b/lib/ssh_parser.pm
@@ -183,6 +183,14 @@ sub parser {
 		$reply		= 'Reverse check failed';
 	} elsif($string =~ m/but this does not map back to the address/) {
 		$reply		= 'Reverse map failure';
+	} elsif($string =~ m/Timeout before authentication for connection from/) {
+		$_		= $string;
+		$hostile	= 1;
+		$reply		= 'Timeout before authentication';
+		PARSER:
+			m/from\ ($re_host)\ to\ ($re_host),\ pid/gcix && do {
+				$host	= $1;
+			};
 	} else {
 		$reply	= 'No match for '.$string;
 	}