5702 sshd: Possible breakin attempt (high number of reverse lookup errors). pci_dss_11.4, 5711 1.1.1.1 Example of rule that will ignore sshd failed logins from IP 1.1.1.1.