Limit the regex to the end of line, so we don't get errors regarding PAM Authentication errors with hostnames that start with an ip:)

lib/ssh_parser.pm

@@ -171,7 +171,7 @@ sub parser {
 			m/ ($re_host) /gcix && do {
 				$host	= $1;
 			};
-	} elsif($string =~ m/Authentication error for( illegal user|) $re_user from $re_host/) {
+	} elsif($string =~ m/Authentication error for( illegal user|) $re_user from $re_host$/) {
 		$_		= $string;
 		$hostile	= 1;
 		$reply		= 'Authentication error';