[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Mon Dec 28 06:25:41 CST 2009


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Mon Dec 28 06:25:20 2009
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /home/dmah/bin/qmail-kill.sh 1> /dev/null 2>&1: 144 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.weekly: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

4 messages delivered immediately to 4 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

0.07 MB transfered in 335 responses  (1xx 0, 2xx 0, 3xx 76, 4xx 259, 5xx 0) 
 26 Images (0.01 MB),
 9 Documents (0.00 MB),
 2 Archives (0.00 MB),
 1 Sound files (0.00 MB),
 200 Content pages (0.04 MB),
 1 Redirects (0.00 MB),
 96 Other (0.03 MB) 

Attempts to use 1 known hacks were logged 1 time(s)
  phpmyadmin   by 
          83.167.62.165 1 time(s) 

A total of 1 sites probed the server 
  83.167.62.165  

A total of 34 unidentified 'other' records logged
  GET /djc/stdio/index.cfm/daddy/show/mommy/94 HTTP/1.1 with response code(s) 1 404 responses
  GET http://proxyjudge1.proxyfire.net/fastenv HTTP/1.1 with response code(s) 1 404 responses
  GET /matthewo/styles/cssUploader.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 6 404 responses
  GET /bumblelee HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/checkbox_check_all.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 4 404 responses
  GET /jeff/code/toggle_tablerows.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 29 400 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /mccreath/potatosalad/archives/pooh_n_me.jpe HTTP/1.1 with response code(s) 1 404 responses
  GET /seb HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\" HTTP/1.0 with response code(s) 2 404 responses
  GET /rudy HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio HTTP/1.1 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.0 with response code(s) 1 404 responses
  GET /tos.cfm HTTP/1.0 with response code(s) 1 404 responses
  - with response code(s) 17 408 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 6 404 responses
  GET /dshadovi/MM_resources.cfm HTTP/1.1 with response code(s) 2 404 responses
  GET /matthewo HTTP/1.1 with response code(s) 1 404 responses
  GET /luminosity/thoughts/thoughts.rss HTTP/1.1 with response code(s) 1 404 responses
  GET /isaac/photos/index.cfm?currentnum=46 HTTP/1.1 with response code(s) 1 404 responses
  GET /liorean HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/imagemap_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /arijit HTTP/1.1 with response code(s) 1 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 3 404 responses
  GET /isaac/photos/index.cfm?currentnum=20 HTTP/1.1 with response code(s) 1 404 responses
  GET /node/60180 with response code(s) 1 404 responses

A total of 18 ROBOTS were logged 
      Yandex/1.01.001 (compatible; Win16; H) 4 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2 time(s) 
      ia_archiver-web.archive.org 1 time(s) 
      Mozilla/5.0 (Windows; U; Windows NT 6.0; ru; rv:1.9.0.14) Gecko/2009082707 Firefox/3.0.14 1 time(s) 
      Speedy Spider (http://www.entireweb.com/about/search_tech/speedy_spider/) 1 time(s) 
      msnbot/2.0b (+http://search.msn.com/msnbot.htm) 22 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 4 time(s) 
      GingerCrawler/1.0 (Language Assistant for Dyslexics; www.gingersoftware.com/crawler_agent.htm; support at ginger software dot com) 1 time(s) 
      Mozilla/5.0 (compatible; Exabot/3.0; +http://www.exabot.com/go/robot) 1 time(s) 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 2 time(s) 
      Mozilla/5.0 (compatible; KaloogaBot; http://www.kalooga.com/info.html?page=crawler) 1 time(s) 
      Mozilla/4.0 1 time(s) 
      Nokia6682/2.0 (3.01.1) SymbianOS/8.0 Series60/2.6 Profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0 (compatible;YahooSeeker/M1A1-R2D2; http://help.yahoo.com/help/us/ysearch/crawling/crawling-01.html) 1 time(s) 
      Mozilla/5.0 (compatible; Exabot/3.0 (BiggerBetter); +http://www.exabot.com/go/robot) 1 time(s) 
      Mozilla/5.0 (compatible; 008/0.83; http://www.80legs.com/spider.html;) Gecko/2008032620 2 time(s) 
      ia_archiver (+http://www.alexa.com/site/help/webmasters; crawler at alexa.com) 1 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 2 time(s) 
      MLBot (www.metadatalabs.com/mlbot) 1 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 511 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

sshd:
   Authentication Failures:
      unknown (sgd4.accelsa.com.mx): 30 Time(s)
      unknown (121.52.215.180): 25 Time(s)
      unknown (219.234.95.164): 23 Time(s)
      unknown (190.146.246.36): 20 Time(s)
      unknown (58.60.106.24): 20 Time(s)
      unknown (ip-160-211.sn2.eutelia.it): 20 Time(s)
      unknown (194.107.broadband15.iol.cz): 17 Time(s)
      unknown (202.102.245.109): 16 Time(s)
      unknown (194.51.12.238): 15 Time(s)
      unknown (200.13.253.122): 15 Time(s)
      unknown (211.115.234.143): 15 Time(s)
      unknown (212.243.41.9): 15 Time(s)
      unknown (220.162.241.11): 15 Time(s)
      unknown (58.247.222.163): 15 Time(s)
      unknown (201.82.6.7): 14 Time(s)
      unknown (80.169.105.159): 12 Time(s)
      unknown (116.55.226.131): 10 Time(s)
      unknown (84.246.69.21): 10 Time(s)
      unknown (93-63-231-55.ip29.fastwebnet.it): 10 Time(s)
      unknown (col.master-controls.com): 10 Time(s)
      unknown (host77-226-static.106-82-b.business.telecomitalia.it): 9 Time(s)
      unknown (90.182.107.194): 8 Time(s)
      unknown (hsi-kbw-078-043-082-153.hsi4.kabel-badenwuerttemberg.de): 8 Time(s)
      unknown (201009019005.user.veloxzone.com.br): 5 Time(s)
      unknown (bzq-62-219-4-102.static.dcenter.bezeqint.net): 5 Time(s)
      unknown (mail.atkft.hu): 5 Time(s)
      unknown (p578b19fb.dip0.t-ipconnect.de): 5 Time(s)
   Invalid Users:
      Unknown Account: 372 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   131.226.55.116.broad.km.yn.dynamic.163data.com.cn: 10 Time(s)
   bd20a342.virtua.com.br: 46 Time(s)
   c9520607.cps.static.virtua.com.br: 14 Time(s)
   fw.tablemac.com: 15 Time(s)
   static-ip-cr19014624636.cable.net.co: 20 Time(s)

Didn't receive an ident from these IPs:
   124.166.250.250: 5 Time(s)
   200.140.194.84: 5 Time(s)
   201-0-145-106.dial-up.telesp.net.br (201.0.145.106): 5 Time(s)
   211.63.6.207: 5 Time(s)
   61.19.33.52: 5 Time(s)
   85-90-213-253.adsl.sta.poltava.velton.ua (85.90.213.253): 2 Time(s)
   aqva.empopasto.com.co (200.21.174.52): 5 Time(s)
   bd20a342.virtua.com.br (189.32.163.66): 5 Time(s)
   gbk220.internetdsl.tpnet.pl (83.12.36.220): 2 Time(s)
   startrek.tajen.edu.tw (192.192.217.93): 5 Time(s)

Failed logins from these:
   academy/password from 155.198.233.95: 1 Time(s)
   adam/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   adam/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   adam/keyboard-interactive/pam from 201.9.19.5: 5 Time(s)
   adam/keyboard-interactive/pam from 202.102.245.109: 1 Time(s)
   adam/keyboard-interactive/pam from 212.243.41.9: 5 Time(s)
   adam/keyboard-interactive/pam from 220.162.241.11: 5 Time(s)
   adam/keyboard-interactive/pam from 82.106.226.77: 5 Time(s)
   adam/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   adam/keyboard-interactive/pam from 93.63.231.55: 5 Time(s)
   admin/password from 124.166.250.250: 21 Time(s)
   admin/password from 155.198.233.95: 1 Time(s)
   admin/password from 211.63.6.207: 5 Time(s)
   admin1/password from 83.12.36.220: 2 Time(s)
   admin2/password from 83.12.36.220: 2 Time(s)
   adrian/keyboard-interactive/pam from 116.55.226.131: 5 Time(s)
   adrian/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   adrian/keyboard-interactive/pam from 190.146.246.36: 1 Time(s)
   adrian/keyboard-interactive/pam from 202.102.245.109: 5 Time(s)
   adrian/keyboard-interactive/pam from 58.60.106.24: 5 Time(s)
   adrian/keyboard-interactive/pam from 80.169.105.159: 2 Time(s)
   adrian/keyboard-interactive/pam from 83.211.160.211: 5 Time(s)
   alex/password from 201.0.145.106: 2 Time(s)
   alias/password from 200.21.174.52: 4 Time(s)
   apache/password from 200.140.194.84: 2 Time(s)
   carol/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   carol/keyboard-interactive/pam from 200.13.253.122: 5 Time(s)
   carol/keyboard-interactive/pam from 211.115.234.143: 5 Time(s)
   carol/keyboard-interactive/pam from 58.247.222.163: 5 Time(s)
   carol/keyboard-interactive/pam from 83.211.160.211: 5 Time(s)
   carol/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   chloe/keyboard-interactive/pam from 200.13.253.122: 5 Time(s)
   chloe/keyboard-interactive/pam from 202.102.245.109: 5 Time(s)
   chloe/keyboard-interactive/pam from 212.243.41.9: 5 Time(s)
   chloe/keyboard-interactive/pam from 219.234.95.164: 5 Time(s)
   chloe/keyboard-interactive/pam from 78.43.82.153: 3 Time(s)
   chloe/keyboard-interactive/pam from 80.169.105.159: 5 Time(s)
   chloe/keyboard-interactive/pam from 84.246.69.21: 5 Time(s)
   condor/password from 200.140.194.84: 5 Time(s)
   condor/password from 201.0.145.106: 1 Time(s)
   daemon/password from 155.198.233.95: 1 Time(s)
   david/password from 201.0.145.106: 2 Time(s)
   dbadmin/password from 83.12.36.220: 2 Time(s)
   delta/password from 155.198.233.95: 1 Time(s)
   demo/password from 200.140.194.84: 3 Time(s)
   dylan/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   dylan/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   dylan/keyboard-interactive/pam from 190.146.246.36: 5 Time(s)
   dylan/keyboard-interactive/pam from 194.51.12.238: 5 Time(s)
   dylan/keyboard-interactive/pam from 58.60.106.24: 5 Time(s)
   dylan/keyboard-interactive/pam from 83.211.160.211: 5 Time(s)
   fax/password from 83.12.36.220: 2 Time(s)
   fluffy/password from 211.63.6.207: 5 Time(s)
   gateway/password from 83.12.36.220: 2 Time(s)
   ght/password from 189.32.163.66: 5 Time(s)
   global/password from 200.140.194.84: 5 Time(s)
   global/password from 201.0.145.106: 1 Time(s)
   globus/password from 200.140.194.84: 5 Time(s)
   globus/password from 201.0.145.106: 1 Time(s)
   guest/password from 155.198.233.95: 1 Time(s)
   guest/password from 211.63.6.207: 2 Time(s)
   guest1/password from 83.12.36.220: 2 Time(s)
   guest2/password from 83.12.36.220: 2 Time(s)
   httpd/password from 189.32.163.66: 5 Time(s)
   hyperic/password from 189.32.163.66: 5 Time(s)
   import/password from 83.12.36.220: 2 Time(s)
   initrd/password from 189.32.163.66: 5 Time(s)
   james/password from 201.0.145.106: 2 Time(s)
   jboss/password from 200.140.194.84: 5 Time(s)
   judge/password from 201.0.145.106: 1 Time(s)
   julie/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   julie/keyboard-interactive/pam from 201.244.188.202: 5 Time(s)
   julie/keyboard-interactive/pam from 201.82.6.7: 4 Time(s)
   julie/keyboard-interactive/pam from 212.243.41.9: 5 Time(s)
   julie/keyboard-interactive/pam from 219.234.95.164: 5 Time(s)
   julie/keyboard-interactive/pam from 58.60.106.24: 5 Time(s)
   junior/password from 189.32.163.66: 5 Time(s)
   keith/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   keith/keyboard-interactive/pam from 220.162.241.11: 5 Time(s)
   keith/keyboard-interactive/pam from 83.211.160.211: 5 Time(s)
   keith/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   klint/password from 189.32.163.66: 3 Time(s)
   kristen/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   kristen/keyboard-interactive/pam from 190.146.246.36: 5 Time(s)
   kristen/keyboard-interactive/pam from 202.102.245.109: 5 Time(s)
   kristen/keyboard-interactive/pam from 78.43.82.153: 5 Time(s)
   kristen/keyboard-interactive/pam from 93.63.231.55: 5 Time(s)
   netbsd/password from 83.12.36.220: 2 Time(s)
   office/password from 200.21.174.52: 4 Time(s)
   oracle/password from 201.0.145.106: 2 Time(s)
   oracle/password from 218.15.163.222: 4 Time(s)
   patricia/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   patricia/keyboard-interactive/pam from 190.146.246.36: 5 Time(s)
   patricia/keyboard-interactive/pam from 194.51.12.238: 5 Time(s)
   patricia/keyboard-interactive/pam from 201.244.188.202: 5 Time(s)
   patricia/keyboard-interactive/pam from 201.82.6.7: 5 Time(s)
   patricia/keyboard-interactive/pam from 211.115.234.143: 5 Time(s)
   patricia/keyboard-interactive/pam from 219.234.95.164: 5 Time(s)
   patricia/keyboard-interactive/pam from 80.169.105.159: 5 Time(s)
   patricia/keyboard-interactive/pam from 84.246.69.21: 5 Time(s)
   patricia/keyboard-interactive/pam from 87.139.25.251: 5 Time(s)
   patricia/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   pedro/password from 212.18.195.102: 4 Time(s)
   postgres/password from 212.18.195.102: 4 Time(s)
   postmaster/password from 200.140.194.84: 5 Time(s)
   protector/password from 155.198.233.95: 1 Time(s)
   proxy/password from 83.12.36.220: 1 Time(s)
   recruit/password from 200.21.174.52: 4 Time(s)
   robert/keyboard-interactive/pam from 116.55.226.131: 5 Time(s)
   robert/keyboard-interactive/pam from 200.13.253.122: 5 Time(s)
   robert/keyboard-interactive/pam from 201.82.6.7: 5 Time(s)
   robert/keyboard-interactive/pam from 219.234.95.164: 8 Time(s)
   robert/keyboard-interactive/pam from 220.162.241.11: 5 Time(s)
   robert/keyboard-interactive/pam from 58.247.222.163: 5 Time(s)
   robert/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   root/password from 124.166.250.250: 21 Time(s)
   root/password from 155.198.233.95: 1 Time(s)
   root/password from 189.32.163.66: 10 Time(s)
   root/password from 192.192.217.93: 56 Time(s)
   root/password from 211.63.6.207: 5 Time(s)
   root/password from 212.18.195.102: 4 Time(s)
   root/password from 218.15.163.222: 52 Time(s)
   root/password from 219.138.222.228: 56 Time(s)
   root/password from 62.116.168.98: 48 Time(s)
   root/password from 83.12.36.220: 31 Time(s)
   sabrina/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   sabrina/keyboard-interactive/pam from 190.146.246.36: 4 Time(s)
   sabrina/keyboard-interactive/pam from 194.51.12.238: 5 Time(s)
   sabrina/keyboard-interactive/pam from 211.115.234.143: 5 Time(s)
   sabrina/keyboard-interactive/pam from 58.247.222.163: 5 Time(s)
   sabrina/keyboard-interactive/pam from 58.60.106.24: 5 Time(s)
   sabrina/keyboard-interactive/pam from 62.219.4.102: 5 Time(s)
   sabrina/keyboard-interactive/pam from 62.77.221.54: 5 Time(s)
   sabrina/keyboard-interactive/pam from 82.106.226.77: 4 Time(s)
   sales/password from 200.21.174.52: 4 Time(s)
   samba/password from 200.21.174.52: 4 Time(s)
   site/password from 212.18.195.102: 4 Time(s)
   skylyn/password from 155.198.233.95: 1 Time(s)
   staff/password from 200.21.174.52: 4 Time(s)
   sysadmin/password from 83.12.36.220: 2 Time(s)
   team/password from 201.0.145.106: 1 Time(s)
   test/password from 124.166.250.250: 10 Time(s)
   test/password from 155.198.233.95: 1 Time(s)
   test/password from 211.63.6.207: 4 Time(s)
   test/password from 218.15.163.222: 4 Time(s)
   test/password from 83.12.36.220: 8 Time(s)
   tester/password from 155.198.233.95: 1 Time(s)
   testing/password from 155.198.233.95: 1 Time(s)
   tomcat/password from 200.140.194.84: 5 Time(s)
   tomcat/password from 200.21.174.52: 4 Time(s)
   tomcat/password from 201.0.145.106: 1 Time(s)
   unosol/password from 189.32.163.66: 3 Time(s)
   upload/password from 200.140.194.84: 5 Time(s)
   upload/password from 201.0.145.106: 1 Time(s)
   virtuoso/password from 212.18.195.102: 4 Time(s)
   vladimir/password from 201.0.145.106: 2 Time(s)
   vmail/password from 212.18.195.102: 4 Time(s)
   vmlinuz/password from 189.32.163.66: 5 Time(s)
   vpn/password from 212.18.195.102: 4 Time(s)
   vuser/password from 212.18.195.102: 4 Time(s)
   webadmin/password from 200.21.174.52: 4 Time(s)
   webmaster/password from 155.198.233.95: 1 Time(s)
   webmaster/password from 211.63.6.207: 1 Time(s)
   www-data/password from 212.18.195.102: 4 Time(s)

Illegal users from these:
   academy/none from 155.198.233.95: 1 Time(s)
   academy/password from 155.198.233.95: 1 Time(s)
   adam/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   adam/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   adam/keyboard-interactive/pam from 201.9.19.5: 5 Time(s)
   adam/keyboard-interactive/pam from 202.102.245.109: 1 Time(s)
   adam/keyboard-interactive/pam from 212.243.41.9: 5 Time(s)
   adam/keyboard-interactive/pam from 220.162.241.11: 5 Time(s)
   adam/keyboard-interactive/pam from 82.106.226.77: 5 Time(s)
   adam/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   adam/keyboard-interactive/pam from 93.63.231.55: 5 Time(s)
   adam/none from 121.52.215.180: 5 Time(s)
   adam/none from 148.233.140.193: 5 Time(s)
   adam/none from 201.9.19.5: 5 Time(s)
   adam/none from 202.102.245.109: 1 Time(s)
   adam/none from 212.243.41.9: 5 Time(s)
   adam/none from 220.162.241.11: 5 Time(s)
   adam/none from 82.106.226.77: 5 Time(s)
   adam/none from 90.182.107.194: 5 Time(s)
   adam/none from 93.63.231.55: 5 Time(s)
   admin/none from 124.166.250.250: 21 Time(s)
   admin/none from 155.198.233.95: 1 Time(s)
   admin/none from 211.63.6.207: 5 Time(s)
   admin/password from 124.166.250.250: 21 Time(s)
   admin/password from 155.198.233.95: 1 Time(s)
   admin/password from 211.63.6.207: 5 Time(s)
   admin1/none from 83.12.36.220: 2 Time(s)
   admin1/password from 83.12.36.220: 2 Time(s)
   admin2/none from 83.12.36.220: 2 Time(s)
   admin2/password from 83.12.36.220: 2 Time(s)
   adrian/keyboard-interactive/pam from 116.55.226.131: 5 Time(s)
   adrian/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   adrian/keyboard-interactive/pam from 190.146.246.36: 1 Time(s)
   adrian/keyboard-interactive/pam from 202.102.245.109: 5 Time(s)
   adrian/keyboard-interactive/pam from 58.60.106.24: 5 Time(s)
   adrian/keyboard-interactive/pam from 80.169.105.159: 2 Time(s)
   adrian/keyboard-interactive/pam from 83.211.160.211: 5 Time(s)
   adrian/none from 116.55.226.131: 5 Time(s)
   adrian/none from 121.52.215.180: 5 Time(s)
   adrian/none from 190.146.246.36: 1 Time(s)
   adrian/none from 202.102.245.109: 5 Time(s)
   adrian/none from 58.60.106.24: 5 Time(s)
   adrian/none from 80.169.105.159: 2 Time(s)
   adrian/none from 83.211.160.211: 5 Time(s)
   alex/none from 201.0.145.106: 2 Time(s)
   alex/password from 201.0.145.106: 2 Time(s)
   alias/password from 200.21.174.52: 4 Time(s)
   apache/none from 200.140.194.84: 2 Time(s)
   apache/password from 200.140.194.84: 2 Time(s)
   carol/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   carol/keyboard-interactive/pam from 200.13.253.122: 5 Time(s)
   carol/keyboard-interactive/pam from 211.115.234.143: 5 Time(s)
   carol/keyboard-interactive/pam from 58.247.222.163: 5 Time(s)
   carol/keyboard-interactive/pam from 83.211.160.211: 5 Time(s)
   carol/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   carol/none from 148.233.140.193: 5 Time(s)
   carol/none from 200.13.253.122: 5 Time(s)
   carol/none from 211.115.234.143: 5 Time(s)
   carol/none from 58.247.222.163: 5 Time(s)
   carol/none from 83.211.160.211: 5 Time(s)
   carol/none from 90.182.107.194: 5 Time(s)
   chloe/keyboard-interactive/pam from 200.13.253.122: 5 Time(s)
   chloe/keyboard-interactive/pam from 202.102.245.109: 5 Time(s)
   chloe/keyboard-interactive/pam from 212.243.41.9: 5 Time(s)
   chloe/keyboard-interactive/pam from 219.234.95.164: 5 Time(s)
   chloe/keyboard-interactive/pam from 78.43.82.153: 3 Time(s)
   chloe/keyboard-interactive/pam from 80.169.105.159: 5 Time(s)
   chloe/keyboard-interactive/pam from 84.246.69.21: 5 Time(s)
   chloe/none from 200.13.253.122: 5 Time(s)
   chloe/none from 202.102.245.109: 5 Time(s)
   chloe/none from 212.243.41.9: 5 Time(s)
   chloe/none from 219.234.95.164: 5 Time(s)
   chloe/none from 78.43.82.153: 3 Time(s)
   chloe/none from 80.169.105.159: 5 Time(s)
   chloe/none from 84.246.69.21: 5 Time(s)
   condor/none from 200.140.194.84: 5 Time(s)
   condor/none from 201.0.145.106: 1 Time(s)
   condor/password from 200.140.194.84: 5 Time(s)
   condor/password from 201.0.145.106: 1 Time(s)
   david/none from 201.0.145.106: 2 Time(s)
   david/password from 201.0.145.106: 2 Time(s)
   dbadmin/none from 83.12.36.220: 2 Time(s)
   dbadmin/password from 83.12.36.220: 2 Time(s)
   delta/none from 155.198.233.95: 1 Time(s)
   delta/password from 155.198.233.95: 1 Time(s)
   demo/none from 200.140.194.84: 3 Time(s)
   demo/password from 200.140.194.84: 3 Time(s)
   dylan/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   dylan/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   dylan/keyboard-interactive/pam from 190.146.246.36: 5 Time(s)
   dylan/keyboard-interactive/pam from 194.51.12.238: 5 Time(s)
   dylan/keyboard-interactive/pam from 58.60.106.24: 5 Time(s)
   dylan/keyboard-interactive/pam from 83.211.160.211: 5 Time(s)
   dylan/none from 121.52.215.180: 5 Time(s)
   dylan/none from 148.233.140.193: 5 Time(s)
   dylan/none from 190.146.246.36: 5 Time(s)
   dylan/none from 194.51.12.238: 5 Time(s)
   dylan/none from 58.60.106.24: 5 Time(s)
   dylan/none from 83.211.160.211: 5 Time(s)
   fax/none from 83.12.36.220: 2 Time(s)
   fax/password from 83.12.36.220: 2 Time(s)
   fluffy/none from 211.63.6.207: 5 Time(s)
   fluffy/password from 211.63.6.207: 5 Time(s)
   gateway/none from 83.12.36.220: 2 Time(s)
   gateway/password from 83.12.36.220: 2 Time(s)
   ght/none from 189.32.163.66: 5 Time(s)
   ght/password from 189.32.163.66: 5 Time(s)
   global/none from 200.140.194.84: 5 Time(s)
   global/none from 201.0.145.106: 1 Time(s)
   global/password from 200.140.194.84: 5 Time(s)
   global/password from 201.0.145.106: 1 Time(s)
   globus/none from 200.140.194.84: 5 Time(s)
   globus/none from 201.0.145.106: 1 Time(s)
   globus/password from 200.140.194.84: 5 Time(s)
   globus/password from 201.0.145.106: 1 Time(s)
   guest/none from 155.198.233.95: 1 Time(s)
   guest/none from 211.63.6.207: 2 Time(s)
   guest/password from 155.198.233.95: 1 Time(s)
   guest/password from 211.63.6.207: 2 Time(s)
   guest1/none from 83.12.36.220: 2 Time(s)
   guest1/password from 83.12.36.220: 2 Time(s)
   guest2/none from 83.12.36.220: 2 Time(s)
   guest2/password from 83.12.36.220: 2 Time(s)
   httpd/none from 189.32.163.66: 5 Time(s)
   httpd/password from 189.32.163.66: 5 Time(s)
   hyperic/none from 189.32.163.66: 5 Time(s)
   hyperic/password from 189.32.163.66: 5 Time(s)
   import/none from 83.12.36.220: 2 Time(s)
   import/password from 83.12.36.220: 2 Time(s)
   initrd/none from 189.32.163.66: 5 Time(s)
   initrd/password from 189.32.163.66: 5 Time(s)
   james/none from 201.0.145.106: 2 Time(s)
   james/password from 201.0.145.106: 2 Time(s)
   jboss/none from 200.140.194.84: 5 Time(s)
   jboss/password from 200.140.194.84: 5 Time(s)
   judge/none from 201.0.145.106: 1 Time(s)
   judge/password from 201.0.145.106: 1 Time(s)
   julie/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   julie/keyboard-interactive/pam from 201.244.188.202: 5 Time(s)
   julie/keyboard-interactive/pam from 201.82.6.7: 4 Time(s)
   julie/keyboard-interactive/pam from 212.243.41.9: 5 Time(s)
   julie/keyboard-interactive/pam from 219.234.95.164: 5 Time(s)
   julie/keyboard-interactive/pam from 58.60.106.24: 5 Time(s)
   julie/none from 121.52.215.180: 5 Time(s)
   julie/none from 201.244.188.202: 5 Time(s)
   julie/none from 201.82.6.7: 4 Time(s)
   julie/none from 212.243.41.9: 5 Time(s)
   julie/none from 219.234.95.164: 5 Time(s)
   julie/none from 58.60.106.24: 5 Time(s)
   junior/none from 189.32.163.66: 5 Time(s)
   junior/password from 189.32.163.66: 5 Time(s)
   keith/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   keith/keyboard-interactive/pam from 220.162.241.11: 5 Time(s)
   keith/keyboard-interactive/pam from 83.211.160.211: 5 Time(s)
   keith/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   keith/none from 148.233.140.193: 5 Time(s)
   keith/none from 220.162.241.11: 5 Time(s)
   keith/none from 83.211.160.211: 5 Time(s)
   keith/none from 90.182.107.194: 5 Time(s)
   klint/none from 189.32.163.66: 3 Time(s)
   klint/password from 189.32.163.66: 3 Time(s)
   kristen/keyboard-interactive/pam from 121.52.215.180: 5 Time(s)
   kristen/keyboard-interactive/pam from 190.146.246.36: 5 Time(s)
   kristen/keyboard-interactive/pam from 202.102.245.109: 5 Time(s)
   kristen/keyboard-interactive/pam from 78.43.82.153: 5 Time(s)
   kristen/keyboard-interactive/pam from 93.63.231.55: 5 Time(s)
   kristen/none from 121.52.215.180: 5 Time(s)
   kristen/none from 190.146.246.36: 5 Time(s)
   kristen/none from 202.102.245.109: 5 Time(s)
   kristen/none from 78.43.82.153: 5 Time(s)
   kristen/none from 93.63.231.55: 5 Time(s)
   netbsd/none from 83.12.36.220: 2 Time(s)
   netbsd/password from 83.12.36.220: 2 Time(s)
   office/none from 200.21.174.52: 4 Time(s)
   office/password from 200.21.174.52: 4 Time(s)
   oracle/none from 201.0.145.106: 2 Time(s)
   oracle/none from 218.15.163.222: 4 Time(s)
   oracle/password from 201.0.145.106: 2 Time(s)
   oracle/password from 218.15.163.222: 4 Time(s)
   patricia/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   patricia/keyboard-interactive/pam from 190.146.246.36: 5 Time(s)
   patricia/keyboard-interactive/pam from 194.51.12.238: 5 Time(s)
   patricia/keyboard-interactive/pam from 201.244.188.202: 5 Time(s)
   patricia/keyboard-interactive/pam from 201.82.6.7: 5 Time(s)
   patricia/keyboard-interactive/pam from 211.115.234.143: 5 Time(s)
   patricia/keyboard-interactive/pam from 219.234.95.164: 5 Time(s)
   patricia/keyboard-interactive/pam from 80.169.105.159: 5 Time(s)
   patricia/keyboard-interactive/pam from 84.246.69.21: 5 Time(s)
   patricia/keyboard-interactive/pam from 87.139.25.251: 5 Time(s)
   patricia/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   patricia/none from 148.233.140.193: 5 Time(s)
   patricia/none from 190.146.246.36: 5 Time(s)
   patricia/none from 194.51.12.238: 5 Time(s)
   patricia/none from 201.244.188.202: 5 Time(s)
   patricia/none from 201.82.6.7: 5 Time(s)
   patricia/none from 211.115.234.143: 5 Time(s)
   patricia/none from 219.234.95.164: 5 Time(s)
   patricia/none from 80.169.105.159: 5 Time(s)
   patricia/none from 84.246.69.21: 5 Time(s)
   patricia/none from 87.139.25.251: 5 Time(s)
   patricia/none from 90.182.107.194: 5 Time(s)
   pedro/none from 212.18.195.102: 4 Time(s)
   pedro/password from 212.18.195.102: 4 Time(s)
   postmaster/none from 200.140.194.84: 5 Time(s)
   postmaster/password from 200.140.194.84: 5 Time(s)
   protector/none from 155.198.233.95: 1 Time(s)
   protector/password from 155.198.233.95: 1 Time(s)
   recruit/none from 200.21.174.52: 4 Time(s)
   recruit/password from 200.21.174.52: 4 Time(s)
   robert/keyboard-interactive/pam from 116.55.226.131: 5 Time(s)
   robert/keyboard-interactive/pam from 200.13.253.122: 5 Time(s)
   robert/keyboard-interactive/pam from 201.82.6.7: 5 Time(s)
   robert/keyboard-interactive/pam from 219.234.95.164: 8 Time(s)
   robert/keyboard-interactive/pam from 220.162.241.11: 5 Time(s)
   robert/keyboard-interactive/pam from 58.247.222.163: 5 Time(s)
   robert/keyboard-interactive/pam from 90.182.107.194: 5 Time(s)
   robert/none from 116.55.226.131: 5 Time(s)
   robert/none from 200.13.253.122: 5 Time(s)
   robert/none from 201.82.6.7: 5 Time(s)
   robert/none from 219.234.95.164: 8 Time(s)
   robert/none from 220.162.241.11: 5 Time(s)
   robert/none from 58.247.222.163: 5 Time(s)
   robert/none from 90.182.107.194: 5 Time(s)
   sabrina/keyboard-interactive/pam from 148.233.140.193: 5 Time(s)
   sabrina/keyboard-interactive/pam from 190.146.246.36: 4 Time(s)
   sabrina/keyboard-interactive/pam from 194.51.12.238: 5 Time(s)
   sabrina/keyboard-interactive/pam from 211.115.234.143: 5 Time(s)
   sabrina/keyboard-interactive/pam from 58.247.222.163: 5 Time(s)
   sabrina/keyboard-interactive/pam from 58.60.106.24: 5 Time(s)
   sabrina/keyboard-interactive/pam from 62.219.4.102: 5 Time(s)
   sabrina/keyboard-interactive/pam from 62.77.221.54: 5 Time(s)
   sabrina/keyboard-interactive/pam from 82.106.226.77: 4 Time(s)
   sabrina/none from 148.233.140.193: 5 Time(s)
   sabrina/none from 190.146.246.36: 4 Time(s)
   sabrina/none from 194.51.12.238: 5 Time(s)
   sabrina/none from 211.115.234.143: 5 Time(s)
   sabrina/none from 58.247.222.163: 5 Time(s)
   sabrina/none from 58.60.106.24: 5 Time(s)
   sabrina/none from 62.219.4.102: 5 Time(s)
   sabrina/none from 62.77.221.54: 5 Time(s)
   sabrina/none from 82.106.226.77: 4 Time(s)
   sales/none from 200.21.174.52: 4 Time(s)
   sales/password from 200.21.174.52: 4 Time(s)
   samba/none from 200.21.174.52: 4 Time(s)
   samba/password from 200.21.174.52: 4 Time(s)
   site/none from 212.18.195.102: 4 Time(s)
   site/password from 212.18.195.102: 4 Time(s)
   skylyn/none from 155.198.233.95: 1 Time(s)
   skylyn/password from 155.198.233.95: 1 Time(s)
   staff/none from 200.21.174.52: 4 Time(s)
   staff/password from 200.21.174.52: 4 Time(s)
   sysadmin/none from 83.12.36.220: 2 Time(s)
   sysadmin/password from 83.12.36.220: 2 Time(s)
   team/none from 201.0.145.106: 1 Time(s)
   team/password from 201.0.145.106: 1 Time(s)
   test/none from 124.166.250.250: 10 Time(s)
   test/none from 155.198.233.95: 1 Time(s)
   test/none from 211.63.6.207: 4 Time(s)
   test/none from 218.15.163.222: 4 Time(s)
   test/none from 83.12.36.220: 8 Time(s)
   test/password from 124.166.250.250: 10 Time(s)
   test/password from 155.198.233.95: 1 Time(s)
   test/password from 211.63.6.207: 4 Time(s)
   test/password from 218.15.163.222: 4 Time(s)
   test/password from 83.12.36.220: 8 Time(s)
   tester/none from 155.198.233.95: 1 Time(s)
   tester/password from 155.198.233.95: 1 Time(s)
   testing/none from 155.198.233.95: 1 Time(s)
   testing/password from 155.198.233.95: 1 Time(s)
   tomcat/none from 200.140.194.84: 5 Time(s)
   tomcat/none from 200.21.174.52: 4 Time(s)
   tomcat/none from 201.0.145.106: 1 Time(s)
   tomcat/password from 200.140.194.84: 5 Time(s)
   tomcat/password from 200.21.174.52: 4 Time(s)
   tomcat/password from 201.0.145.106: 1 Time(s)
   unosol/none from 189.32.163.66: 3 Time(s)
   unosol/password from 189.32.163.66: 3 Time(s)
   upload/none from 200.140.194.84: 5 Time(s)
   upload/none from 201.0.145.106: 1 Time(s)
   upload/password from 200.140.194.84: 5 Time(s)
   upload/password from 201.0.145.106: 1 Time(s)
   virtuoso/none from 212.18.195.102: 4 Time(s)
   virtuoso/password from 212.18.195.102: 4 Time(s)
   vladimir/none from 201.0.145.106: 2 Time(s)
   vladimir/password from 201.0.145.106: 2 Time(s)
   vmail/none from 212.18.195.102: 4 Time(s)
   vmail/password from 212.18.195.102: 4 Time(s)
   vmlinuz/none from 189.32.163.66: 5 Time(s)
   vmlinuz/password from 189.32.163.66: 5 Time(s)
   vpn/none from 212.18.195.102: 4 Time(s)
   vpn/password from 212.18.195.102: 4 Time(s)
   vuser/none from 212.18.195.102: 4 Time(s)
   vuser/password from 212.18.195.102: 4 Time(s)
   webadmin/none from 200.21.174.52: 4 Time(s)
   webadmin/password from 200.21.174.52: 4 Time(s)
   webmaster/none from 155.198.233.95: 1 Time(s)
   webmaster/none from 211.63.6.207: 1 Time(s)
   webmaster/password from 155.198.233.95: 1 Time(s)
   webmaster/password from 211.63.6.207: 1 Time(s)

User login attempt failed because:
   shell /sbin/nologin does not exist:
      alias : 4 Time(s)

Error in PAM authentication:
   User not known to the underlying authentication module for illegal user adam from 121.52.215.180 : 5 Time(s)
   User not known to the underlying authentication module for illegal user adam from 201009019005.user.veloxzone.com.br : 5 Time(s)
   User not known to the underlying authentication module for illegal user adam from 202.102.245.109 : 1 Time(s)
   User not known to the underlying authentication module for illegal user adam from 212.243.41.9 : 5 Time(s)
   User not known to the underlying authentication module for illegal user adam from 220.162.241.11 : 5 Time(s)
   User not known to the underlying authentication module for illegal user adam from 90.182.107.194 : 5 Time(s)
   User not known to the underlying authentication module for illegal user adam from 93-63-231-55.ip29.fastwebnet.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user adam from host77-226-static.106-82-b.business.telecomitalia.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user adam from sgd4.accelsa.com.mx : 5 Time(s)
   User not known to the underlying authentication module for illegal user adrian from 116.55.226.131 : 5 Time(s)
   User not known to the underlying authentication module for illegal user adrian from 121.52.215.180 : 5 Time(s)
   User not known to the underlying authentication module for illegal user adrian from 190.146.246.36 : 1 Time(s)
   User not known to the underlying authentication module for illegal user adrian from 202.102.245.109 : 5 Time(s)
   User not known to the underlying authentication module for illegal user adrian from 58.60.106.24 : 5 Time(s)
   User not known to the underlying authentication module for illegal user adrian from 80.169.105.159 : 2 Time(s)
   User not known to the underlying authentication module for illegal user adrian from ip-160-211.sn2.eutelia.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user carol from 194.107.broadband15.iol.cz : 5 Time(s)
   User not known to the underlying authentication module for illegal user carol from 200.13.253.122 : 5 Time(s)
   User not known to the underlying authentication module for illegal user carol from 211.115.234.143 : 5 Time(s)
   User not known to the underlying authentication module for illegal user carol from 58.247.222.163 : 5 Time(s)
   User not known to the underlying authentication module for illegal user carol from ip-160-211.sn2.eutelia.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user carol from sgd4.accelsa.com.mx : 5 Time(s)
   User not known to the underlying authentication module for illegal user chloe from 200.13.253.122 : 5 Time(s)
   User not known to the underlying authentication module for illegal user chloe from 202.102.245.109 : 5 Time(s)
   User not known to the underlying authentication module for illegal user chloe from 212.243.41.9 : 5 Time(s)
   User not known to the underlying authentication module for illegal user chloe from 219.234.95.164 : 5 Time(s)
   User not known to the underlying authentication module for illegal user chloe from 80.169.105.159 : 5 Time(s)
   User not known to the underlying authentication module for illegal user chloe from 84.246.69.21 : 5 Time(s)
   User not known to the underlying authentication module for illegal user chloe from hsi-kbw-078-043-082-153.hsi4.kabel-badenwuerttemberg.de : 3 Time(s)
   User not known to the underlying authentication module for illegal user dylan from 121.52.215.180 : 5 Time(s)
   User not known to the underlying authentication module for illegal user dylan from 190.146.246.36 : 5 Time(s)
   User not known to the underlying authentication module for illegal user dylan from 194.51.12.238 : 5 Time(s)
   User not known to the underlying authentication module for illegal user dylan from 58.60.106.24 : 5 Time(s)
   User not known to the underlying authentication module for illegal user dylan from ip-160-211.sn2.eutelia.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user dylan from sgd4.accelsa.com.mx : 5 Time(s)
   User not known to the underlying authentication module for illegal user julie from 121.52.215.180 : 5 Time(s)
   User not known to the underlying authentication module for illegal user julie from 201.82.6.7 : 4 Time(s)
   User not known to the underlying authentication module for illegal user julie from 212.243.41.9 : 5 Time(s)
   User not known to the underlying authentication module for illegal user julie from 219.234.95.164 : 5 Time(s)
   User not known to the underlying authentication module for illegal user julie from 58.60.106.24 : 5 Time(s)
   User not known to the underlying authentication module for illegal user julie from col.master-controls.com : 5 Time(s)
   User not known to the underlying authentication module for illegal user keith from 194.107.broadband15.iol.cz : 5 Time(s)
   User not known to the underlying authentication module for illegal user keith from 220.162.241.11 : 5 Time(s)
   User not known to the underlying authentication module for illegal user keith from ip-160-211.sn2.eutelia.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user keith from sgd4.accelsa.com.mx : 5 Time(s)
   User not known to the underlying authentication module for illegal user kristen from 121.52.215.180 : 5 Time(s)
   User not known to the underlying authentication module for illegal user kristen from 190.146.246.36 : 5 Time(s)
   User not known to the underlying authentication module for illegal user kristen from 202.102.245.109 : 5 Time(s)
   User not known to the underlying authentication module for illegal user kristen from 93-63-231-55.ip29.fastwebnet.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user kristen from hsi-kbw-078-043-082-153.hsi4.kabel-badenwuerttemberg.de : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 190.146.246.36 : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 194.107.broadband15.iol.cz : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 194.51.12.238 : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 201.82.6.7 : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 211.115.234.143 : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 219.234.95.164 : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 80.169.105.159 : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 84.246.69.21 : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from col.master-controls.com : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from p578b19fb.dip0.t-ipconnect.de : 5 Time(s)
   User not known to the underlying authentication module for illegal user patricia from sgd4.accelsa.com.mx : 5 Time(s)
   User not known to the underlying authentication module for illegal user robert from 116.55.226.131 : 5 Time(s)
   User not known to the underlying authentication module for illegal user robert from 194.107.broadband15.iol.cz : 2 Time(s)
   User not known to the underlying authentication module for illegal user robert from 200.13.253.122 : 5 Time(s)
   User not known to the underlying authentication module for illegal user robert from 201.82.6.7 : 5 Time(s)
   User not known to the underlying authentication module for illegal user robert from 219.234.95.164 : 8 Time(s)
   User not known to the underlying authentication module for illegal user robert from 220.162.241.11 : 5 Time(s)
   User not known to the underlying authentication module for illegal user robert from 58.247.222.163 : 5 Time(s)
   User not known to the underlying authentication module for illegal user robert from 90.182.107.194 : 3 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from 190.146.246.36 : 4 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from 194.51.12.238 : 5 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from 211.115.234.143 : 5 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from 58.247.222.163 : 5 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from 58.60.106.24 : 5 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from bzq-62-219-4-102.static.dcenter.bezeqint.net : 5 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from host77-226-static.106-82-b.business.telecomitalia.it : 4 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from mail.atkft.hu : 5 Time(s)
   User not known to the underlying authentication module for illegal user sabrina from sgd4.accelsa.com.mx : 5 Time(s)

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 2 Time(s)

 ---------------------- Syslogd End ------------------------- 


 --------------------- vpopmail Begin ------------------------ 


No Such User Found:
	access@ - 22 Time(s)
	account@ - 19 Time(s)
	admin@ - 24 Time(s)
	administrator@ - 14 Time(s)
	backup@ - 22 Time(s)
	cbird@ - 1 Time(s)
	data@ - 24 Time(s)
	informix@ - 21 Time(s)
	lizdy@ - 28 Time(s)
	oracle8@ - 17 Time(s)
	oracle@ - 23 Time(s)
	pwrchute@ - 10 Time(s)
	root@ - 31 Time(s)
	server@ - 27 Time(s)
	sybase@ - 22 Time(s)
	test@ - 27 Time(s)
	user@ - 24 Time(s)
	web@ - 14 Time(s)
	webmaster@ - 22 Time(s)
	www@ - 24 Time(s)

 ---------------------- vpopmail End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   55G   14G  81% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 



More information about the Sysadmin mailing list