[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Thu Aug 21 06:26:19 CDT 2008


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Thu Aug 21 06:25:30 2008
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dkaufman:
      /bin/date > $HOME/date.txt: 1440 Time(s)
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/local/bin/planetupdate 1>/dev/null 2>&1: 24 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
      wget -O - -q http://evolt.org/cron.php: 72 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

3 messages delivered immediately to 3 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

16.76 MB transfered in 1494 responses  (1xx 0, 2xx 450, 3xx 96, 4xx 948, 5xx 0) 
 54 Images (0.02 MB),
 8 Documents (0.00 MB),
 4 Archives (0.00 MB),
 1253 Content pages (16.46 MB),
 4 Redirects (0.00 MB),
 47 Program source files (0.08 MB),
 124 Other (0.20 MB) 

Attempts to use 1 known hacks were logged 198 time(s)
  phpmyadmin   by 
          213.81.217.7 198 time(s) 

A total of 1 sites probed the server 
  213.81.217.7  

A total of 55 unidentified 'other' records logged
  GET /jobs HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/6alt_rating08.gif?annotate=1.2&hideattic=0&sortby=file HTTP/1.1 with response code(s) 1 200 responses
  GET /jeff/code/form_to_window/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/*checkout*/weo_theme/6alt_rating06.gif?rev=1.2 HTTP/1.1 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/redcube.gif?annotate=1.5&only_with_tag=weo_theme-4-5 HTTP/1.1 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?rev=1.25&view=log HTTP/1.0 with response code(s) 1 200 responses
  GET /jeff/code/character_converting_textarea.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /arijit/dw_ext HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/grabbag/status/demo/images/tab_logo.gif?rev=1.1&sortby=author&view=auto HTTP/1.1 with response code(s) 1 200 responses
  GET /node/28652?';DECLARE%20 at S%20CHAR(4000);SET%20 at S=CAST(0x4445434C415245204054207661726368617228323535292C40432076617263686172283430303029204445434C415245205461626C655F437572736F7220435552534F5220464F522073656C65637420612E6E616D652C622E6E616D652066726F6D207379736F626A6563747320612C737973636F6C756D6E73206220776865726520612E69643D622E696420616E6420612E78747970653D27752720616E642028622E78747970653D3939206F7220622E78747970653D3335206F7220622E78747970653D323331206F7220622E78747970653D31363729204F50454E205461626C655F437572736F72204645 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/evoltorg.gif?rev=1.3&sortby=file&view=log HTTP/1.1 with response code(s) 1 200 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 3 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/Attic/red-cube.gif?rev=1.1&content-type=text/vnd.viewcvs-markup HTTP/1.1 with response code(s) 1 200 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/yahoo.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/cubes-3.png?sortby=author&sortdir=down&only_with_tag=MAIN HTTP/1.1 with response code(s) 2 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/6alt_rating09.gif?view=graph&sortby=log&only_with_tag=HEAD HTTP/1.1 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/evoltorg.gif?view=graph&hideattic=1&sortby=date&only_with_tag=HEAD HTTP/1.1 with response code(s) 1 200 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 3 400 responses
  GET /jeff/code/input_value.cfm?sub=1 HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/dns/org.evolt?annotate=1.26&sortby=rev&only_with_tag=MAIN HTTP/1.1 with response code(s) 1 200 responses
  GET /jeff/code/modified_pre_blocks.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?hideattic=0&only_with_tag=MAIN&r2=1.18&r1=1.25 HTTP/1.1 with response code(s) 1 200 responses
  GET /article/Breadcrumbs_for_Those_Using_ASP/17/4438/evolt.org?;DECLARE%20 at S%20CHAR(4000);SET%20 at S=CAST(0x4445434C415245204054207661726368617228323535292C40432076617263686172283430303029204445434C415245205461626C655F437572736F7220435552534F5220464F522073656C65637420612E6E616D652C622E6E616D652066726F6D207379736F626A6563747320612C737973636F6C756D6E73206220776865726520612E69643D622E696420616E6420612E78747970653D27752720616E642028622E78747970653D3939206F7220622E78747970653D3335206F7220622E78747970653D323331206F7220622E78747970653D3136 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/6alt_rating04.gif?r1=1.1&sortdir=down&rev=1.2&only_with_tag=MAIN&sortby=author&view=log HTTP/1.1 with response code(s) 1 200 responses
  GET /dshadovi HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/imagemap_rollover/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.0 with response code(s) 3 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/cubes-0.png?annotate=1.1&sortby=log&sortdir=down&only_with_tag=HEAD HTTP/1.1 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/square-bullet-default.gif?hideattic=1&sortby=log&only_with_tag=MAIN HTTP/1.1 with response code(s) 1 200 responses
  GET /mantruc/blog HTTP/1.0 with response code(s) 2 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?rev=1.11&content-type=text/vnd.viewcvs-markup&only_with_tag=MAIN HTTP/1.1 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/.cvsignore?rev=1.1 HTTP/1.1 with response code(s) 1 200 responses
  GET /kroet HTTP/1.1 with response code(s) 1 404 responses
  GET /waggener/TOVBlog HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/*checkout*/weo_theme/Attic/green-cube.gif?rev=1.2 HTTP/1.1 with response code(s) 1 200 responses
  GET /garrett/site/books/factual HTTP/1.0 with response code(s) 1 404 responses
  - with response code(s) 59 408 responses
  GET /gozz/stripcr.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/6alt_rating11.gif?view=markup&rev=1.2&sortby=log&only_with_tag=HEAD HTTP/1.1 with response code(s) 1 200 responses
  GET /nmk HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/print.module?hideattic=0&only_with_tag=MAIN&r2=1.25&r1=1.6 HTTP/1.1 with response code(s) 1 200 responses
  GET /arijit HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/select_reset.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/6alt_rating11.gif?sortby=date&only_with_tag=weo_theme-4-5 HTTP/1.1 with response code(s) 1 200 responses
  GET /bwackensquork HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_html/evoltorg.psd?rev=1.1&sortby=rev&view=auto HTTP/1.1 with response code(s) 1 200 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/.cvsignore?annotate=1.2&sortby=author&only_with_tag=weo_theme-4-5 HTTP/1.1 with response code(s) 1 200 responses
  GET /jeff/code/checkbox_check_all.cfm HTTP/1.1 with response code(s) 3 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 2 404 responses
  GET /jeff/code/capture_window/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /turkif HTTP/1.1 with response code(s) 1 404 responses
  GET /cgi-bin/viewcvs.cgi/weo_theme/.cvsignore?r1=1.2&sortby=author&r2=1.1&only_with_tag=MAIN HTTP/1.1 with response code(s) 1 200 responses

A total of 13 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 6 time(s) 
      Gaisbot/3.0+(robot06 at gais.cs.ccu.edu.tw;+http://gais.cs.ccu.edu.tw/robot.php) 1 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 3 time(s) 
      ia_archiver 1 time(s) 
      CCBot/1.0 (+http://www.commoncrawl.org/bot.html) 1 time(s) 
      - 1 time(s) 
      msnbot-media/1.0 (+http://search.msn.com/msnbot.htm) 3 time(s) 
      msnbot-media/1.1 (+http://search.msn.com/msnbot.htm) 6 time(s) 
      ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler at alexa.com) 1 time(s) 
      Speedy Spider (http://www.entireweb.com/about/search_tech/speedy_spider/) 1 time(s) 
      msnbot/1.1 (+http://search.msn.com/msnbot.htm) 30 time(s) 
      Mozilla/4.0 (compatible; NaverBot/1.0; http://help.naver.com/delete_main.asp) 1 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 1 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): UDP: bad checksum. From 12.96.160.107:53 to 67.19.100.194:26402 ulen 53
1 Time(s): UDP: bad checksum. From 12.96.160.107:53 to 67.19.100.194:34425 ulen 195
1 Time(s): UDP: short packet: 12.96.160.115:53 127/111 to 67.19.100.194:44443
1 Time(s): UDP: short packet: 12.96.160.115:53 154/138 to 67.19.100.194:43044
1 Time(s): UDP: short packet: 12.96.160.115:53 158/142 to 67.19.100.194:64715
1 Time(s): UDP: short packet: 12.96.160.115:53 159/143 to 67.19.100.194:37610
1 Time(s): UDP: short packet: 12.96.160.115:53 159/143 to 67.19.100.194:64715
1 Time(s): UDP: short packet: 12.96.160.115:53 178/162 to 67.19.100.194:59437
1 Time(s): UDP: short packet: 12.96.160.115:53 182/166 to 67.19.100.194:35723
1 Time(s): UDP: short packet: 12.96.160.115:53 185/169 to 67.19.100.194:64715
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:32855
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:33668
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:43242
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:51301
1 Time(s): UDP: short packet: 12.96.160.115:53 213/197 to 67.19.100.194:54231
1 Time(s): UDP: short packet: 12.96.160.115:53 254/238 to 67.19.100.194:64715
1 Time(s): UDP: short packet: 12.96.160.115:53 272/256 to 67.19.100.194:56778
1 Time(s): UDP: short packet: 12.96.160.115:53 305/289 to 67.19.100.194:44241
1 Time(s): UDP: short packet: 12.96.160.115:53 313/297 to 67.19.100.194:54678
1 Time(s): UDP: short packet: 12.96.160.115:53 313/297 to 67.19.100.194:58277
1 Time(s): UDP: short packet: 12.96.160.115:53 315/299 to 67.19.100.194:42087
1 Time(s): UDP: short packet: 12.96.160.115:53 315/299 to 67.19.100.194:54650
1 Time(s): UDP: short packet: 12.96.160.115:53 446/430 to 67.19.100.194:50102
1 Time(s): UDP: short packet: 12.96.160.115:53 479/463 to 67.19.100.194:50325
1 Time(s): UDP: short packet: 12.96.160.115:53 499/483 to 67.19.100.194:40684
1 Time(s): UDP: short packet: 12.96.160.115:53 530/514 to 67.19.100.194:58454
1 Time(s): UDP: short packet: 12.96.160.115:53 530/514 to 67.19.100.194:58727
1 Time(s): UDP: short packet: 12.96.160.115:53 535/519 to 67.19.100.194:53958
1 Time(s): UDP: short packet: 12.96.160.115:53 56/40 to 67.19.100.194:41044
1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      dkaufman: 1440 Time(s)
      root: 462 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)

sshd:
   Authentication Failures:
      unknown (1-1-2-17a.gkp.gbg.bostream.se): 34 Time(s)
      unknown (78.96.220.78): 29 Time(s)
      unknown (69.15.172.21): 21 Time(s)
      unknown (145.253.179.228): 16 Time(s)
      unknown (53dbdd02.umea.cust.skycom.se): 16 Time(s)
      unknown (host82-179-static.46-85-b.business.telecomitalia.it): 16 Time(s)
      unknown (84.34.172.157): 15 Time(s)
      unknown (net233-81.ertelecom.ru): 12 Time(s)
      unknown (3e44a030.adsl.enternet.hu): 10 Time(s)
      unknown (host153-206-static.115-81-b.business.telecomitalia.it): 10 Time(s)
      unknown (ip0x2ae7b6.pip.mvb.dk): 9 Time(s)
      unknown (211.154.128.158): 8 Time(s)
      unknown (121.33.199.37): 7 Time(s)
      unknown (200-152-223-219.sodobrasil.net.br): 7 Time(s)
      unknown (218.208.56.4): 7 Time(s)
      unknown (124.42.124.87): 6 Time(s)
      unknown (211.144.151.111): 6 Time(s)
      unknown (189-47-181-174.dsl.telesp.net.br): 5 Time(s)
      unknown (85-126-21-82.volume.xdsl-line.inode.at): 5 Time(s)
      unknown (adsl-76-230-26-10.dsl.sndg02.sbcglobal.net): 5 Time(s)
      unknown (88.red-80-34-55.staticip.rima-tde.net): 2 Time(s)
   Invalid Users:
      Unknown Account: 246 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   208.218.in-addr.arpa.tm.net.my: 8 Time(s)
   ns.unique-dns.com.236.114.61.in-addr.arpa: 146 Time(s)
   pc-172-157.dsl.aina.net: 16 Time(s)

Didn't receive an ident from these IPs:
   145.253.179.228: 3 Time(s)
   189.43.21.244: 1 Time(s)
   200-158-218-3.dsl.telesp.net.br (200.158.218.3): 5 Time(s)
   207-208-126-200.fibertel.com.ar (200.126.208.207): 3 Time(s)
   209.40.203.108: 5 Time(s)
   60.49.155.178: 5 Time(s)
   66.109.29.176: 5 Time(s)
   88.Red-80-34-55.staticIP.rima-tde.net (80.34.55.88): 1 Time(s)
   host77-248-static.51-82-b.business.telecomitalia.it (82.51.248.77): 2 Time(s)
   metronet75.infocom.co.ug (217.113.73.75): 1 Time(s)
   ns.unique-dns.com.236.114.61.in-addr.arpa (61.114.236.22): 5 Time(s)

Failed logins from these:
   Schueler/keyboard-interactive/pam from 121.33.199.37: 4 Time(s)
   Schueler/keyboard-interactive/pam from 124.42.124.87: 3 Time(s)
   Schueler/keyboard-interactive/pam from 145.253.179.228: 3 Time(s)
   Schueler/keyboard-interactive/pam from 189.47.181.174: 4 Time(s)
   Schueler/keyboard-interactive/pam from 200.152.223.219: 5 Time(s)
   Schueler/keyboard-interactive/pam from 211.144.151.111: 3 Time(s)
   Schueler/keyboard-interactive/pam from 211.154.128.158: 3 Time(s)
   Schueler/keyboard-interactive/pam from 212.33.233.81: 5 Time(s)
   Schueler/keyboard-interactive/pam from 218.208.56.4: 3 Time(s)
   Schueler/keyboard-interactive/pam from 62.68.160.48: 4 Time(s)
   Schueler/keyboard-interactive/pam from 69.15.172.21: 4 Time(s)
   Schueler/keyboard-interactive/pam from 76.230.26.10: 4 Time(s)
   Schueler/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   Schueler/keyboard-interactive/pam from 80.34.55.88: 1 Time(s)
   Schueler/keyboard-interactive/pam from 81.115.206.153: 3 Time(s)
   Schueler/keyboard-interactive/pam from 82.182.77.70: 5 Time(s)
   Schueler/keyboard-interactive/pam from 83.219.221.2: 5 Time(s)
   Schueler/keyboard-interactive/pam from 84.34.172.157: 5 Time(s)
   Schueler/keyboard-interactive/pam from 85.126.21.82: 2 Time(s)
   Schueler/keyboard-interactive/pam from 85.46.179.82: 4 Time(s)
   Schueler/keyboard-interactive/pam from 87.116.28.143: 3 Time(s)
   Studentenclub/keyboard-interactive/pam from 121.33.199.37: 3 Time(s)
   Studentenclub/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 145.253.179.228: 6 Time(s)
   Studentenclub/keyboard-interactive/pam from 189.47.181.174: 1 Time(s)
   Studentenclub/keyboard-interactive/pam from 200.152.223.219: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 211.144.151.111: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 211.154.128.158: 4 Time(s)
   Studentenclub/keyboard-interactive/pam from 212.33.233.81: 4 Time(s)
   Studentenclub/keyboard-interactive/pam from 218.208.56.4: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 62.68.160.48: 4 Time(s)
   Studentenclub/keyboard-interactive/pam from 69.15.172.21: 3 Time(s)
   Studentenclub/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   Studentenclub/keyboard-interactive/pam from 80.34.55.88: 1 Time(s)
   Studentenclub/keyboard-interactive/pam from 81.115.206.153: 3 Time(s)
   Studentenclub/keyboard-interactive/pam from 82.182.77.70: 5 Time(s)
   Studentenclub/keyboard-interactive/pam from 83.219.221.2: 5 Time(s)
   Studentenclub/keyboard-interactive/pam from 84.34.172.157: 5 Time(s)
   Studentenclub/keyboard-interactive/pam from 85.126.21.82: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 85.46.179.82: 4 Time(s)
   Studentenclub/keyboard-interactive/pam from 87.116.28.143: 3 Time(s)
   a/password from 61.114.236.22: 5 Time(s)
   abel/keyboard-interactive/pam from 124.42.124.87: 1 Time(s)
   abel/keyboard-interactive/pam from 145.253.179.228: 4 Time(s)
   abel/keyboard-interactive/pam from 211.144.151.111: 1 Time(s)
   abel/keyboard-interactive/pam from 211.154.128.158: 1 Time(s)
   abel/keyboard-interactive/pam from 218.208.56.4: 1 Time(s)
   abel/keyboard-interactive/pam from 62.68.160.48: 2 Time(s)
   abel/keyboard-interactive/pam from 69.15.172.21: 2 Time(s)
   abel/keyboard-interactive/pam from 76.230.26.10: 1 Time(s)
   abel/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   abel/keyboard-interactive/pam from 81.115.206.153: 2 Time(s)
   abel/keyboard-interactive/pam from 82.182.77.70: 5 Time(s)
   abel/keyboard-interactive/pam from 83.219.221.2: 3 Time(s)
   abel/keyboard-interactive/pam from 84.34.172.157: 2 Time(s)
   abel/keyboard-interactive/pam from 85.126.21.82: 1 Time(s)
   abel/keyboard-interactive/pam from 85.46.179.82: 3 Time(s)
   abel/password from 61.114.236.22: 5 Time(s)
   abi/keyboard-interactive/pam from 145.253.179.228: 1 Time(s)
   abi/keyboard-interactive/pam from 218.208.56.4: 1 Time(s)
   abi/keyboard-interactive/pam from 69.15.172.21: 2 Time(s)
   abi/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   abi/keyboard-interactive/pam from 81.115.206.153: 1 Time(s)
   abi/keyboard-interactive/pam from 82.182.77.70: 5 Time(s)
   abi/keyboard-interactive/pam from 83.219.221.2: 3 Time(s)
   abi/keyboard-interactive/pam from 84.34.172.157: 2 Time(s)
   abi/keyboard-interactive/pam from 85.46.179.82: 3 Time(s)
   abraham/keyboard-interactive/pam from 145.253.179.228: 2 Time(s)
   abraham/keyboard-interactive/pam from 212.33.233.81: 2 Time(s)
   abraham/keyboard-interactive/pam from 69.15.172.21: 4 Time(s)
   abraham/keyboard-interactive/pam from 78.96.220.78: 4 Time(s)
   abraham/keyboard-interactive/pam from 81.115.206.153: 1 Time(s)
   abraham/keyboard-interactive/pam from 82.182.77.70: 4 Time(s)
   abraham/keyboard-interactive/pam from 84.34.172.157: 1 Time(s)
   abraham/keyboard-interactive/pam from 85.46.179.82: 2 Time(s)
   abraham/keyboard-interactive/pam from 87.116.28.143: 1 Time(s)
   access/keyboard-interactive/pam from 212.33.233.81: 1 Time(s)
   access/keyboard-interactive/pam from 69.15.172.21: 2 Time(s)
   access/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   access/keyboard-interactive/pam from 82.182.77.70: 10 Time(s)
   access/keyboard-interactive/pam from 87.116.28.143: 2 Time(s)
   account/keyboard-interactive/pam from 69.15.172.21: 1 Time(s)
   adalgisa/keyboard-interactive/pam from 69.15.172.21: 1 Time(s)
   admin/password from 209.40.203.108: 3 Time(s)
   admin/password from 82.51.248.77: 2 Time(s)
   alexis/password from 61.114.236.22: 5 Time(s)
   alice/keyboard-interactive/pam from 69.15.172.21: 1 Time(s)
   alison/keyboard-interactive/pam from 69.15.172.21: 1 Time(s)
   art/password from 61.114.236.22: 5 Time(s)
   b/password from 61.114.236.22: 5 Time(s)
   c/password from 61.114.236.22: 5 Time(s)
   cyrus/password from 200.158.218.3: 10 Time(s)
   d/password from 61.114.236.22: 5 Time(s)
   damian/password from 61.114.236.22: 5 Time(s)
   desiree/password from 61.114.236.22: 5 Time(s)
   doris/password from 61.114.236.22: 5 Time(s)
   e/password from 61.114.236.22: 5 Time(s)
   emily/password from 200.158.218.3: 7 Time(s)
   f/password from 61.114.236.22: 5 Time(s)
   g/password from 61.114.236.22: 5 Time(s)
   genevieve/password from 200.158.218.3: 7 Time(s)
   guest/password from 209.40.203.108: 3 Time(s)
   h/password from 61.114.236.22: 5 Time(s)
   helene/password from 200.158.218.3: 20 Time(s)
   henriette/password from 200.158.218.3: 12 Time(s)
   i/password from 61.114.236.22: 5 Time(s)
   info/password from 209.40.203.108: 1 Time(s)
   j/password from 61.114.236.22: 5 Time(s)
   jean/password from 61.114.236.22: 5 Time(s)
   k/password from 61.114.236.22: 5 Time(s)
   l/password from 61.114.236.22: 5 Time(s)
   library/password from 209.40.203.108: 1 Time(s)
   logic/password from 61.114.236.22: 3 Time(s)
   m/password from 61.114.236.22: 5 Time(s)
   mysql/password from 200.158.218.3: 1 Time(s)
   mysql/password from 209.40.203.108: 1 Time(s)
   n/password from 61.114.236.22: 5 Time(s)
   navy/password from 200.158.218.3: 6 Time(s)
   o/password from 61.114.236.22: 5 Time(s)
   oracle/password from 209.40.203.108: 1 Time(s)
   p/password from 61.114.236.22: 5 Time(s)
   q/password from 61.114.236.22: 5 Time(s)
   r/password from 61.114.236.22: 3 Time(s)
   root/password from 200.158.218.3: 9 Time(s)
   root/password from 209.40.203.108: 3 Time(s)
   root/password from 82.51.248.77: 2 Time(s)
   s/password from 61.114.236.22: 2 Time(s)
   sea/password from 200.158.218.3: 10 Time(s)
   seascape/password from 200.158.218.3: 3 Time(s)
   t/password from 61.114.236.22: 1 Time(s)
   t1na/password from 61.114.236.22: 10 Time(s)
   test/password from 209.40.203.108: 3 Time(s)
   test/password from 82.51.248.77: 2 Time(s)
   user/password from 200.158.218.3: 1 Time(s)
   vava/password from 61.114.236.22: 2 Time(s)
   vova/password from 61.114.236.22: 5 Time(s)
   webmaster/password from 209.40.203.108: 1 Time(s)

Illegal users from these:
   Schueler/keyboard-interactive/pam from 121.33.199.37: 4 Time(s)
   Schueler/keyboard-interactive/pam from 124.42.124.87: 3 Time(s)
   Schueler/keyboard-interactive/pam from 145.253.179.228: 3 Time(s)
   Schueler/keyboard-interactive/pam from 189.47.181.174: 4 Time(s)
   Schueler/keyboard-interactive/pam from 200.152.223.219: 5 Time(s)
   Schueler/keyboard-interactive/pam from 211.144.151.111: 3 Time(s)
   Schueler/keyboard-interactive/pam from 211.154.128.158: 3 Time(s)
   Schueler/keyboard-interactive/pam from 212.33.233.81: 5 Time(s)
   Schueler/keyboard-interactive/pam from 218.208.56.4: 3 Time(s)
   Schueler/keyboard-interactive/pam from 62.68.160.48: 4 Time(s)
   Schueler/keyboard-interactive/pam from 69.15.172.21: 4 Time(s)
   Schueler/keyboard-interactive/pam from 76.230.26.10: 4 Time(s)
   Schueler/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   Schueler/keyboard-interactive/pam from 80.34.55.88: 1 Time(s)
   Schueler/keyboard-interactive/pam from 81.115.206.153: 3 Time(s)
   Schueler/keyboard-interactive/pam from 82.182.77.70: 5 Time(s)
   Schueler/keyboard-interactive/pam from 83.219.221.2: 5 Time(s)
   Schueler/keyboard-interactive/pam from 84.34.172.157: 5 Time(s)
   Schueler/keyboard-interactive/pam from 85.126.21.82: 2 Time(s)
   Schueler/keyboard-interactive/pam from 85.46.179.82: 4 Time(s)
   Schueler/keyboard-interactive/pam from 87.116.28.143: 3 Time(s)
   Schueler/none from 121.33.199.37: 4 Time(s)
   Schueler/none from 124.42.124.87: 3 Time(s)
   Schueler/none from 145.253.179.228: 3 Time(s)
   Schueler/none from 189.47.181.174: 4 Time(s)
   Schueler/none from 200.152.223.219: 5 Time(s)
   Schueler/none from 211.144.151.111: 3 Time(s)
   Schueler/none from 211.154.128.158: 3 Time(s)
   Schueler/none from 212.33.233.81: 5 Time(s)
   Schueler/none from 218.208.56.4: 3 Time(s)
   Schueler/none from 62.68.160.48: 4 Time(s)
   Schueler/none from 69.15.172.21: 4 Time(s)
   Schueler/none from 76.230.26.10: 4 Time(s)
   Schueler/none from 78.96.220.78: 5 Time(s)
   Schueler/none from 80.34.55.88: 1 Time(s)
   Schueler/none from 81.115.206.153: 3 Time(s)
   Schueler/none from 82.182.77.70: 5 Time(s)
   Schueler/none from 83.219.221.2: 5 Time(s)
   Schueler/none from 84.34.172.157: 5 Time(s)
   Schueler/none from 85.126.21.82: 2 Time(s)
   Schueler/none from 85.46.179.82: 4 Time(s)
   Schueler/none from 87.116.28.143: 3 Time(s)
   Studentenclub/keyboard-interactive/pam from 121.33.199.37: 3 Time(s)
   Studentenclub/keyboard-interactive/pam from 124.42.124.87: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 145.253.179.228: 6 Time(s)
   Studentenclub/keyboard-interactive/pam from 189.47.181.174: 1 Time(s)
   Studentenclub/keyboard-interactive/pam from 200.152.223.219: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 211.144.151.111: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 211.154.128.158: 4 Time(s)
   Studentenclub/keyboard-interactive/pam from 212.33.233.81: 4 Time(s)
   Studentenclub/keyboard-interactive/pam from 218.208.56.4: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 62.68.160.48: 4 Time(s)
   Studentenclub/keyboard-interactive/pam from 69.15.172.21: 3 Time(s)
   Studentenclub/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   Studentenclub/keyboard-interactive/pam from 80.34.55.88: 1 Time(s)
   Studentenclub/keyboard-interactive/pam from 81.115.206.153: 3 Time(s)
   Studentenclub/keyboard-interactive/pam from 82.182.77.70: 5 Time(s)
   Studentenclub/keyboard-interactive/pam from 83.219.221.2: 5 Time(s)
   Studentenclub/keyboard-interactive/pam from 84.34.172.157: 5 Time(s)
   Studentenclub/keyboard-interactive/pam from 85.126.21.82: 2 Time(s)
   Studentenclub/keyboard-interactive/pam from 85.46.179.82: 4 Time(s)
   Studentenclub/keyboard-interactive/pam from 87.116.28.143: 3 Time(s)
   Studentenclub/none from 121.33.199.37: 3 Time(s)
   Studentenclub/none from 124.42.124.87: 2 Time(s)
   Studentenclub/none from 145.253.179.228: 6 Time(s)
   Studentenclub/none from 189.47.181.174: 1 Time(s)
   Studentenclub/none from 200.152.223.219: 2 Time(s)
   Studentenclub/none from 211.144.151.111: 3 Time(s)
   Studentenclub/none from 211.154.128.158: 4 Time(s)
   Studentenclub/none from 212.33.233.81: 4 Time(s)
   Studentenclub/none from 218.208.56.4: 3 Time(s)
   Studentenclub/none from 62.68.160.48: 4 Time(s)
   Studentenclub/none from 69.15.172.21: 3 Time(s)
   Studentenclub/none from 76.230.26.10: 1 Time(s)
   Studentenclub/none from 78.96.220.78: 5 Time(s)
   Studentenclub/none from 80.34.55.88: 1 Time(s)
   Studentenclub/none from 81.115.206.153: 3 Time(s)
   Studentenclub/none from 82.182.77.70: 5 Time(s)
   Studentenclub/none from 83.219.221.2: 5 Time(s)
   Studentenclub/none from 84.34.172.157: 5 Time(s)
   Studentenclub/none from 85.126.21.82: 2 Time(s)
   Studentenclub/none from 85.46.179.82: 4 Time(s)
   Studentenclub/none from 87.116.28.143: 3 Time(s)
   a/none from 61.114.236.22: 5 Time(s)
   a/password from 61.114.236.22: 5 Time(s)
   abel/keyboard-interactive/pam from 124.42.124.87: 1 Time(s)
   abel/keyboard-interactive/pam from 145.253.179.228: 4 Time(s)
   abel/keyboard-interactive/pam from 211.144.151.111: 1 Time(s)
   abel/keyboard-interactive/pam from 211.154.128.158: 1 Time(s)
   abel/keyboard-interactive/pam from 218.208.56.4: 1 Time(s)
   abel/keyboard-interactive/pam from 62.68.160.48: 2 Time(s)
   abel/keyboard-interactive/pam from 69.15.172.21: 2 Time(s)
   abel/keyboard-interactive/pam from 76.230.26.10: 1 Time(s)
   abel/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   abel/keyboard-interactive/pam from 81.115.206.153: 2 Time(s)
   abel/keyboard-interactive/pam from 82.182.77.70: 5 Time(s)
   abel/keyboard-interactive/pam from 83.219.221.2: 3 Time(s)
   abel/keyboard-interactive/pam from 84.34.172.157: 2 Time(s)
   abel/keyboard-interactive/pam from 85.126.21.82: 1 Time(s)
   abel/keyboard-interactive/pam from 85.46.179.82: 3 Time(s)
   abel/none from 124.42.124.87: 1 Time(s)
   abel/none from 145.253.179.228: 4 Time(s)
   abel/none from 211.144.151.111: 1 Time(s)
   abel/none from 211.154.128.158: 2 Time(s)
   abel/none from 218.208.56.4: 1 Time(s)
   abel/none from 61.114.236.22: 5 Time(s)
   abel/none from 62.68.160.48: 2 Time(s)
   abel/none from 69.15.172.21: 2 Time(s)
   abel/none from 76.230.26.10: 1 Time(s)
   abel/none from 78.96.220.78: 5 Time(s)
   abel/none from 81.115.206.153: 2 Time(s)
   abel/none from 82.182.77.70: 5 Time(s)
   abel/none from 83.219.221.2: 4 Time(s)
   abel/none from 84.34.172.157: 2 Time(s)
   abel/none from 85.126.21.82: 1 Time(s)
   abel/none from 85.46.179.82: 3 Time(s)
   abel/password from 61.114.236.22: 5 Time(s)
   abi/keyboard-interactive/pam from 145.253.179.228: 1 Time(s)
   abi/keyboard-interactive/pam from 218.208.56.4: 1 Time(s)
   abi/keyboard-interactive/pam from 69.15.172.21: 2 Time(s)
   abi/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   abi/keyboard-interactive/pam from 81.115.206.153: 1 Time(s)
   abi/keyboard-interactive/pam from 82.182.77.70: 5 Time(s)
   abi/keyboard-interactive/pam from 83.219.221.2: 3 Time(s)
   abi/keyboard-interactive/pam from 84.34.172.157: 2 Time(s)
   abi/keyboard-interactive/pam from 85.46.179.82: 3 Time(s)
   abi/none from 145.253.179.228: 1 Time(s)
   abi/none from 218.208.56.4: 1 Time(s)
   abi/none from 69.15.172.21: 2 Time(s)
   abi/none from 78.96.220.78: 5 Time(s)
   abi/none from 81.115.206.153: 1 Time(s)
   abi/none from 82.182.77.70: 5 Time(s)
   abi/none from 83.219.221.2: 3 Time(s)
   abi/none from 84.34.172.157: 2 Time(s)
   abi/none from 85.46.179.82: 3 Time(s)
   abraham/keyboard-interactive/pam from 145.253.179.228: 2 Time(s)
   abraham/keyboard-interactive/pam from 212.33.233.81: 2 Time(s)
   abraham/keyboard-interactive/pam from 69.15.172.21: 4 Time(s)
   abraham/keyboard-interactive/pam from 78.96.220.78: 4 Time(s)
   abraham/keyboard-interactive/pam from 81.115.206.153: 1 Time(s)
   abraham/keyboard-interactive/pam from 82.182.77.70: 4 Time(s)
   abraham/keyboard-interactive/pam from 84.34.172.157: 1 Time(s)
   abraham/keyboard-interactive/pam from 85.46.179.82: 2 Time(s)
   abraham/keyboard-interactive/pam from 87.116.28.143: 1 Time(s)
   abraham/none from 145.253.179.228: 2 Time(s)
   abraham/none from 212.33.233.81: 2 Time(s)
   abraham/none from 69.15.172.21: 4 Time(s)
   abraham/none from 78.96.220.78: 4 Time(s)
   abraham/none from 81.115.206.153: 1 Time(s)
   abraham/none from 82.182.77.70: 5 Time(s)
   abraham/none from 83.219.221.2: 1 Time(s)
   abraham/none from 84.34.172.157: 1 Time(s)
   abraham/none from 85.46.179.82: 2 Time(s)
   abraham/none from 87.116.28.143: 1 Time(s)
   access/keyboard-interactive/pam from 212.33.233.81: 1 Time(s)
   access/keyboard-interactive/pam from 69.15.172.21: 2 Time(s)
   access/keyboard-interactive/pam from 78.96.220.78: 5 Time(s)
   access/keyboard-interactive/pam from 82.182.77.70: 10 Time(s)
   access/keyboard-interactive/pam from 87.116.28.143: 2 Time(s)
   access/none from 212.33.233.81: 1 Time(s)
   access/none from 69.15.172.21: 2 Time(s)
   access/none from 78.96.220.78: 5 Time(s)
   access/none from 82.182.77.70: 10 Time(s)
   access/none from 84.34.172.157: 1 Time(s)
   access/none from 87.116.28.143: 3 Time(s)
   account/keyboard-interactive/pam from 69.15.172.21: 1 Time(s)
   account/none from 69.15.172.21: 1 Time(s)
   adalgisa/keyboard-interactive/pam from 69.15.172.21: 1 Time(s)
   adalgisa/none from 69.15.172.21: 1 Time(s)
   admin/none from 209.40.203.108: 3 Time(s)
   admin/none from 82.51.248.77: 2 Time(s)
   admin/password from 209.40.203.108: 3 Time(s)
   admin/password from 82.51.248.77: 2 Time(s)
   alexis/none from 61.114.236.22: 5 Time(s)
   alexis/password from 61.114.236.22: 5 Time(s)
   alice/keyboard-interactive/pam from 69.15.172.21: 1 Time(s)
   alice/none from 69.15.172.21: 1 Time(s)
   alison/keyboard-interactive/pam from 69.15.172.21: 1 Time(s)
   alison/none from 69.15.172.21: 1 Time(s)
   art/none from 61.114.236.22: 5 Time(s)
   art/password from 61.114.236.22: 5 Time(s)
   b/none from 61.114.236.22: 5 Time(s)
   b/password from 61.114.236.22: 5 Time(s)
   c/none from 61.114.236.22: 5 Time(s)
   c/password from 61.114.236.22: 5 Time(s)
   cyrus/none from 200.158.218.3: 10 Time(s)
   cyrus/password from 200.158.218.3: 10 Time(s)
   d/none from 61.114.236.22: 5 Time(s)
   d/password from 61.114.236.22: 5 Time(s)
   damian/none from 61.114.236.22: 5 Time(s)
   damian/password from 61.114.236.22: 5 Time(s)
   desiree/none from 61.114.236.22: 5 Time(s)
   desiree/password from 61.114.236.22: 5 Time(s)
   doris/none from 61.114.236.22: 5 Time(s)
   doris/password from 61.114.236.22: 5 Time(s)
   e/none from 61.114.236.22: 5 Time(s)
   e/password from 61.114.236.22: 5 Time(s)
   emily/none from 200.158.218.3: 7 Time(s)
   emily/password from 200.158.218.3: 7 Time(s)
   f/none from 61.114.236.22: 5 Time(s)
   f/password from 61.114.236.22: 5 Time(s)
   g/none from 61.114.236.22: 5 Time(s)
   g/password from 61.114.236.22: 5 Time(s)
   genevieve/none from 200.158.218.3: 7 Time(s)
   genevieve/password from 200.158.218.3: 7 Time(s)
   guest/none from 209.40.203.108: 3 Time(s)
   guest/password from 209.40.203.108: 3 Time(s)
   h/none from 61.114.236.22: 5 Time(s)
   h/password from 61.114.236.22: 5 Time(s)
   helene/none from 200.158.218.3: 20 Time(s)
   helene/password from 200.158.218.3: 20 Time(s)
   henriette/none from 200.158.218.3: 12 Time(s)
   henriette/password from 200.158.218.3: 12 Time(s)
   i/none from 61.114.236.22: 5 Time(s)
   i/password from 61.114.236.22: 5 Time(s)
   info/none from 209.40.203.108: 1 Time(s)
   info/password from 209.40.203.108: 1 Time(s)
   j/none from 61.114.236.22: 5 Time(s)
   j/password from 61.114.236.22: 5 Time(s)
   jean/none from 61.114.236.22: 5 Time(s)
   jean/password from 61.114.236.22: 5 Time(s)
   k/none from 61.114.236.22: 5 Time(s)
   k/password from 61.114.236.22: 5 Time(s)
   l/none from 61.114.236.22: 5 Time(s)
   l/password from 61.114.236.22: 5 Time(s)
   library/none from 209.40.203.108: 1 Time(s)
   library/password from 209.40.203.108: 1 Time(s)
   logic/none from 61.114.236.22: 3 Time(s)
   logic/password from 61.114.236.22: 3 Time(s)
   m/none from 61.114.236.22: 5 Time(s)
   m/password from 61.114.236.22: 5 Time(s)
   n/none from 61.114.236.22: 5 Time(s)
   n/password from 61.114.236.22: 5 Time(s)
   navy/none from 200.158.218.3: 6 Time(s)
   navy/password from 200.158.218.3: 6 Time(s)
   o/none from 61.114.236.22: 5 Time(s)
   o/password from 61.114.236.22: 5 Time(s)
   oracle/none from 209.40.203.108: 1 Time(s)
   oracle/password from 209.40.203.108: 1 Time(s)
   p/none from 61.114.236.22: 5 Time(s)
   p/password from 61.114.236.22: 5 Time(s)
   q/none from 61.114.236.22: 5 Time(s)
   q/password from 61.114.236.22: 5 Time(s)
   r/none from 61.114.236.22: 3 Time(s)
   r/password from 61.114.236.22: 3 Time(s)
   s/none from 61.114.236.22: 2 Time(s)
   s/password from 61.114.236.22: 2 Time(s)
   sea/none from 200.158.218.3: 10 Time(s)
   sea/password from 200.158.218.3: 10 Time(s)
   seascape/none from 200.158.218.3: 3 Time(s)
   seascape/password from 200.158.218.3: 3 Time(s)
   t/none from 61.114.236.22: 1 Time(s)
   t/password from 61.114.236.22: 1 Time(s)
   t1na/none from 61.114.236.22: 10 Time(s)
   t1na/password from 61.114.236.22: 10 Time(s)
   test/none from 209.40.203.108: 3 Time(s)
   test/none from 82.51.248.77: 2 Time(s)
   test/password from 209.40.203.108: 3 Time(s)
   test/password from 82.51.248.77: 2 Time(s)
   user/none from 200.158.218.3: 1 Time(s)
   user/password from 200.158.218.3: 1 Time(s)
   vava/none from 61.114.236.22: 2 Time(s)
   vava/password from 61.114.236.22: 2 Time(s)
   vova/none from 61.114.236.22: 5 Time(s)
   vova/password from 61.114.236.22: 5 Time(s)
   webmaster/none from 209.40.203.108: 1 Time(s)
   webmaster/password from 209.40.203.108: 1 Time(s)

Error in PAM authentication:
   User not known to the underlying authentication module for illegal user Schueler from 1-1-2-17a.gkp.gbg.bostream.se : 5 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 121.33.199.37 : 4 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 124.42.124.87 : 3 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 145.253.179.228 : 3 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 189-47-181-174.dsl.telesp.net.br : 4 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 200-152-223-219.sodobrasil.net.br : 5 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 211.144.151.111 : 3 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 211.154.128.158 : 3 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 218.208.56.4 : 3 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 3e44a030.adsl.enternet.hu : 4 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 53dbdd02.umea.cust.skycom.se : 5 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 69.15.172.21 : 4 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 78.96.220.78 : 5 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 84.34.172.157 : 5 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 85-126-21-82.volume.xdsl-line.inode.at : 2 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from 88.red-80-34-55.staticip.rima-tde.net : 1 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from adsl-76-230-26-10.dsl.sndg02.sbcglobal.net : 4 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from host153-206-static.115-81-b.business.telecomitalia.it : 3 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from host82-179-static.46-85-b.business.telecomitalia.it : 4 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from ip0x2ae7b6.pip.mvb.dk : 3 Time(s)
   User not known to the underlying authentication module for illegal user Schueler from net233-81.ertelecom.ru : 5 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 1-1-2-17a.gkp.gbg.bostream.se : 5 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 121.33.199.37 : 3 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 124.42.124.87 : 2 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 145.253.179.228 : 6 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 189-47-181-174.dsl.telesp.net.br : 1 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 200-152-223-219.sodobrasil.net.br : 2 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 211.144.151.111 : 2 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 211.154.128.158 : 4 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 218.208.56.4 : 2 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 3e44a030.adsl.enternet.hu : 4 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 53dbdd02.umea.cust.skycom.se : 5 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 69.15.172.21 : 3 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 78.96.220.78 : 5 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 84.34.172.157 : 5 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 85-126-21-82.volume.xdsl-line.inode.at : 2 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from 88.red-80-34-55.staticip.rima-tde.net : 1 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from host153-206-static.115-81-b.business.telecomitalia.it : 3 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from host82-179-static.46-85-b.business.telecomitalia.it : 4 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from ip0x2ae7b6.pip.mvb.dk : 3 Time(s)
   User not known to the underlying authentication module for illegal user Studentenclub from net233-81.ertelecom.ru : 4 Time(s)
   User not known to the underlying authentication module for illegal user abel from 1-1-2-17a.gkp.gbg.bostream.se : 5 Time(s)
   User not known to the underlying authentication module for illegal user abel from 124.42.124.87 : 1 Time(s)
   User not known to the underlying authentication module for illegal user abel from 145.253.179.228 : 4 Time(s)
   User not known to the underlying authentication module for illegal user abel from 211.144.151.111 : 1 Time(s)
   User not known to the underlying authentication module for illegal user abel from 211.154.128.158 : 1 Time(s)
   User not known to the underlying authentication module for illegal user abel from 218.208.56.4 : 1 Time(s)
   User not known to the underlying authentication module for illegal user abel from 3e44a030.adsl.enternet.hu : 2 Time(s)
   User not known to the underlying authentication module for illegal user abel from 53dbdd02.umea.cust.skycom.se : 3 Time(s)
   User not known to the underlying authentication module for illegal user abel from 69.15.172.21 : 2 Time(s)
   User not known to the underlying authentication module for illegal user abel from 78.96.220.78 : 5 Time(s)
   User not known to the underlying authentication module for illegal user abel from 84.34.172.157 : 2 Time(s)
   User not known to the underlying authentication module for illegal user abel from 85-126-21-82.volume.xdsl-line.inode.at : 1 Time(s)
   User not known to the underlying authentication module for illegal user abel from adsl-76-230-26-10.dsl.sndg02.sbcglobal.net : 1 Time(s)
   User not known to the underlying authentication module for illegal user abel from host153-206-static.115-81-b.business.telecomitalia.it : 2 Time(s)
   User not known to the underlying authentication module for illegal user abel from host82-179-static.46-85-b.business.telecomitalia.it : 3 Time(s)
   User not known to the underlying authentication module for illegal user abi from 1-1-2-17a.gkp.gbg.bostream.se : 5 Time(s)
   User not known to the underlying authentication module for illegal user abi from 145.253.179.228 : 1 Time(s)
   User not known to the underlying authentication module for illegal user abi from 218.208.56.4 : 1 Time(s)
   User not known to the underlying authentication module for illegal user abi from 53dbdd02.umea.cust.skycom.se : 3 Time(s)
   User not known to the underlying authentication module for illegal user abi from 69.15.172.21 : 2 Time(s)
   User not known to the underlying authentication module for illegal user abi from 78.96.220.78 : 5 Time(s)
   User not known to the underlying authentication module for illegal user abi from 84.34.172.157 : 2 Time(s)
   User not known to the underlying authentication module for illegal user abi from host153-206-static.115-81-b.business.telecomitalia.it : 1 Time(s)
   User not known to the underlying authentication module for illegal user abi from host82-179-static.46-85-b.business.telecomitalia.it : 3 Time(s)
   User not known to the underlying authentication module for illegal user abraham from 1-1-2-17a.gkp.gbg.bostream.se : 4 Time(s)
   User not known to the underlying authentication module for illegal user abraham from 145.253.179.228 : 2 Time(s)
   User not known to the underlying authentication module for illegal user abraham from 69.15.172.21 : 4 Time(s)
   User not known to the underlying authentication module for illegal user abraham from 78.96.220.78 : 4 Time(s)
   User not known to the underlying authentication module for illegal user abraham from 84.34.172.157 : 1 Time(s)
   User not known to the underlying authentication module for illegal user abraham from host153-206-static.115-81-b.business.telecomitalia.it : 1 Time(s)
   User not known to the underlying authentication module for illegal user abraham from host82-179-static.46-85-b.business.telecomitalia.it : 2 Time(s)
   User not known to the underlying authentication module for illegal user abraham from ip0x2ae7b6.pip.mvb.dk : 1 Time(s)
   User not known to the underlying authentication module for illegal user abraham from net233-81.ertelecom.ru : 2 Time(s)
   User not known to the underlying authentication module for illegal user access from 1-1-2-17a.gkp.gbg.bostream.se : 10 Time(s)
   User not known to the underlying authentication module for illegal user access from 69.15.172.21 : 2 Time(s)
   User not known to the underlying authentication module for illegal user access from 78.96.220.78 : 5 Time(s)
   User not known to the underlying authentication module for illegal user access from ip0x2ae7b6.pip.mvb.dk : 2 Time(s)
   User not known to the underlying authentication module for illegal user access from net233-81.ertelecom.ru : 1 Time(s)
   User not known to the underlying authentication module for illegal user account from 69.15.172.21 : 1 Time(s)
   User not known to the underlying authentication module for illegal user adalgisa from 69.15.172.21 : 1 Time(s)
   User not known to the underlying authentication module for illegal user alice from 69.15.172.21 : 1 Time(s)
   User not known to the underlying authentication module for illegal user alison from 69.15.172.21 : 1 Time(s)

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   36G   33G  52% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 




More information about the Sysadmin mailing list