[Sysadmin] LogWatch for tempest

root root at tempest.evolt.org
Sat Jan 23 06:25:36 CST 2010


 ################### LogWatch 5.2.2 (06/23/04) #################### 
       Processing Initiated: Sat Jan 23 06:25:17 2010
       Date Range Processed: yesterday
     Detail Level of Output: 10
          Logfiles for Host: tempest
 ################################################################ 

 --------------------- Cron Begin ------------------------ 

Commands Run:
   User dmah:
      /home/dmah/bin/article_reminder.pl: 1 Time(s)
      /home/dmah/bin/comment_reminder.pl: 1 Time(s)
   User mailman:
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/checkdbs: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/disabled: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/gate_news: 288 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/nightly_gzip: 1 Time(s)
      /usr/bin/python -S /home/mailman/lists.evolt.org/cron/senddigests: 1 Time(s)
   User neuro:
      ~neuro/beo/oldbeo/mkarchivesize >/dev/null 2>&1: 1 Time(s)
   User root:
         run-parts --report /etc/cron.hourly: 24 Time(s)
        [ -d /var/lib/php4 ] && find /var/lib/php4/ -type f -cmin +$(/usr/lib/php4/maxlifetime) -print0 | xargs -r -0 rm: 48 Time(s)
      /home/dmah/bin/qmail-kill.sh 1> /dev/null 2>&1: 144 Time(s)
      /store/host/browsers.evolt.org/mkarchivesize: 1 Time(s)
      /usr/bin/freshclam --quiet -l /var/log/clam-update.log: 1 Time(s)
      /usr/sbin/ntpdate -su us.pool.ntp.org us.pool.ntp.org: 1 Time(s)
      /var/qmail/bin/qmailstats 1>/dev/null 2>/dev/null: 1 Time(s)
      if [ -x /usr/bin/vnstat ] && [ `ls /var/lib/vnstat/ | wc -l` -ge 1 ]; then /usr/bin/vnstat -u; fi: 288 Time(s)
      test -x /usr/sbin/anacron || run-parts --report /etc/cron.daily: 1 Time(s)
      test -x /usr/sbin/cron-apt && /usr/sbin/cron-apt: 1 Time(s)
   User www-data:
      [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=awstats -update >/dev/null: 144 Time(s)

 ---------------------- Cron End ------------------------- 


 --------------------- EXIM Begin ------------------------ 


--- Messages history ---

3 messages delivered immediately to 3 total recipients

 ---------------------- EXIM End ------------------------- 


 --------------------- httpd Begin ------------------------ 

0.06 MB transfered in 361 responses  (1xx 0, 2xx 0, 3xx 126, 4xx 235, 5xx 0) 
 11 Images (0.00 MB),
 8 Documents (0.00 MB),
 1 Movies files (0.00 MB),
 1 Windows executable files (0.00 MB),
 265 Content pages (0.04 MB),
 75 Other (0.02 MB) 

Attempts to use 3 known hacks were logged 5 time(s)
  nsiislog.dll   by 
          173.10.18.115 1 time(s) 
  /../../../   by 
          120.106.9.130 1 time(s) 
  phpmyadmin   by 
          64.15.66.234 3 time(s) 

A total of 3 sites probed the server 
  64.15.66.234  
  173.10.18.115  
  120.106.9.130  

A total of 38 unidentified 'other' records logged
  GET /dshadovi/traffic.cfm HTTP/1.0 with response code(s) 1 404 responses
  GET /jobs/index.cfm?action=Edit HTTP/1.1 with response code(s) 1 404 responses
  GET /mccreath/potatosalad/archives/~amnsnow.mpe HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features/ll tell you. If you look in constants.php you HTTP/1.1 with response code(s) 2 400 responses
  GET /gsws/license.kwd HTTP/1.1 with response code(s) 1 404 responses
  GET /tos.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm HTTP/1.1 with response code(s) 8 404 responses
  GET /jeff/code/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/137 HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features/, make sure your database name and password information is specified correctly in constants.php. If you still can HTTP/1.1 with response code(s) 3 400 responses
  GET /signup.cfm HTTP/1.0 with response code(s) 2 404 responses
  GET /faq.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jswiders HTTP/1.1 with response code(s) 1 404 responses
  GET /w00tw00t.at.ISC.SANS.DFind:) HTTP/1.1 with response code(s) 5 400 responses
  GET /jeff/code/dhtml_form_rollover/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /djc/stdio/index.cfm/daddy/show/mommy/66 HTTP/1.1 with response code(s) 1 404 responses
  GET /signup.cfm;\" HTTP/1.0 with response code(s) 1 404 responses
  GET /jeff/code/select_keydown/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /lindsay/nav HTTP/1.1 with response code(s) 1 404 responses
  GET /waggener/TOVBlog HTTP/1.1 with response code(s) 1 404 responses
  - with response code(s) 18 408 responses
  GET /jeff/code/js_url_variables/index.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /mantruc/blog HTTP/1.1 with response code(s) 1 404 responses
  GET /help/* HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/cf_columnlist/demo.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/code/preload_n_rollover HTTP/1.1 with response code(s) 1 404 responses
  GET /dshadovi/MM_resources.cfm HTTP/1.1 with response code(s) 3 404 responses
  GET /isaac/photos/index.cfm?currentnum=46 HTTP/1.1 with response code(s) 1 404 responses
  GET /PHP-Login-System-with-Admin-Features/re having, it works when you register but just not on the first time you load the page? It gives you that error. Look at register() function in session.php, that HTTP/1.1 with response code(s) 1 400 responses
  GET /jeff/code/select_keydown.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /jeff/webcam.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /~atdt1991/uploads HTTP/1.1 with response code(s) 1 404 responses
  GET /burhankhalid/raymond HTTP/1.1 with response code(s) 2 404 responses
  GET /garrett/site/books/factual HTTP/1.1 with response code(s) 3 404 responses
  GET /jeff/code/character_converting_textarea.cfm HTTP/1.1 with response code(s) 1 404 responses
  GET /isaac/photos/index.cfm?currentnum=20 HTTP/1.1 with response code(s) 1 404 responses
  GET /simonc/php/bookmarklet.phps HTTP/1.1 with response code(s) 1 404 responses
  GET /node/60180 with response code(s) 1 404 responses

A total of 17 ROBOTS were logged 
      Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp) 1 time(s) 
      Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 3 time(s) 
      Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.8.1) VoilaBot BETA 1.2 (support.voilabot at orange-ftgroup.com) 1 time(s) 
      Mozilla/5.0 (compatible; DotBot/1.1; http://www.dotnetdotcom.org/, crawler at dotnetdotcom.org) 6 time(s) 
      Yandex/1.01.001 (compatible; Win16; I) 3 time(s) 
      Mozilla/5.0 (compatible; discobot/1.1; +http://discoveryengine.com/discobot.html) 1 time(s) 
      findlinks/1.1.6-beta1 (+http://wortschatz.uni-leipzig.de/findlinks/) 1 time(s) 
      Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/help.html) 1 time(s) 
      Mozilla/5.0 (compatible; Exabot/3.0 (BiggerBetter); +http://www.exabot.com/go/robot) 1 time(s) 
      Nokia6682/2.0 (3.01.1) SymbianOS/8.0 Series60/2.6 Profile/MIDP-2.0 configuration/CLDC-1.1 UP.Link/6.3.0.0.0 (compatible;YahooSeeker/M1A1-R2D2; http://help.yahoo.com/help/us/ysearch/crawling/crawling-01.html) 1 time(s) 
      Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727) 1 time(s) 
      msnbot/2.0b (+http://search.msn.com/msnbot.htm) 17 time(s) 
      Speedy Spider (http://www.entireweb.com/about/search_tech/speedy_spider/) 4 time(s) 
      Baiduspider+(+http://www.baidu.com/search/spider.htm) 2 time(s) 
      Mozilla/5.0 (Twiceler-0.9 http://www.cuil.com/twiceler/robot.html) 6 time(s) 
      MLBot (www.metadatalabs.com/mlbot) 1 time(s) 
      FAST Enterprise Crawler 6 / Scirus scirus-crawler at fast.no; http://www.scirus.com/srsapp/contactus/ 1 time(s) 

 ---------------------- httpd End ------------------------- 


 --------------------- Kernel Begin ------------------------ 


1 Time(s): device eth0 entered promiscuous mode
1 Time(s): device eth0 left promiscuous mode

 ---------------------- Kernel End ------------------------- 


 --------------------- pam_unix Begin ------------------------ 

cron:
   Sessions Opened:
      root: 510 Time(s)
      mailman: 292 Time(s)
      www-data: 144 Time(s)
      dmah: 2 Time(s)
      neuro: 1 Time(s)

sshd:
   Authentication Failures:
      unknown (81.210.113.66): 10 Time(s)
      unknown (p5098aecc.dip0.t-ipconnect.de): 10 Time(s)
      unknown (209.85.66.240): 8 Time(s)
      unknown (a.mx.smilesaude.com.br): 8 Time(s)
      unknown (bard.com.ua): 8 Time(s)
      unknown (62.153.136.122): 7 Time(s)
      postgres (87.235.219.57): 6 Time(s)
      news (115.168.70.179): 5 Time(s)
      news (188.7.broadband7.iol.cz): 5 Time(s)
      news (189-039-012-020.static.spo.ctbc.com.br): 5 Time(s)
      news (uu142.internetdsl.tpnet.pl): 5 Time(s)
      nobody (190.182.10.100): 5 Time(s)
      nobody (211.138.224.180): 5 Time(s)
      nobody (57.129.broadband3.iol.cz): 5 Time(s)
      operator (189-55-185-57-nd.cpe.vivax.com.br): 5 Time(s)
      operator (189.51.143.37): 5 Time(s)
      operator (94.143.192.243): 5 Time(s)
      operator (ip-89-102-33-174.karneval.cz): 5 Time(s)
      operator (laubervilliers-153-52-15-39.w217-128.abo.wanadoo.fr): 5 Time(s)
      operator (mail.specserve.com): 5 Time(s)
      operator (pd95b0fdc.dip0.t-ipconnect.de): 5 Time(s)
      postgres (195-23-46-202.static.net.novis.pt): 5 Time(s)
      postgres (218.95.254.134): 5 Time(s)
      postgres (60.209.234.238): 5 Time(s)
      postgres (62-99-198-61.fuggerstrasse.xdsl-line.inode.at): 5 Time(s)
      postgres (69.169.174.12.provo.static.broadweavenetworks.net): 5 Time(s)
      postgres (72.252.2.246): 5 Time(s)
      postgres (83-64-19-250.volume.xdsl-line.inode.at): 5 Time(s)
      postgres (83-64-58-66.work.xdsl-line.inode.at): 5 Time(s)
      postgres (adsl-99-18-164-69.dsl.hstntx.sbcglobal.net): 5 Time(s)
      postgres (c-67-169-75-27.hsd1.ca.comcast.net): 5 Time(s)
      postgres (endeavour.cityshop.com.br): 5 Time(s)
      postgres (host218-239-static.15-79-b.business.telecomitalia.it): 5 Time(s)
      postgres (ip-53-226.sn1.eutelia.it): 5 Time(s)
      postgres (mail.darek.com.pl): 5 Time(s)
      postgres (pd907d77b.dip0.t-ipconnect.de): 5 Time(s)
      postgres (s15331410.onlinehome-server.info): 5 Time(s)
      unknown (113.100.130.34): 5 Time(s)
      unknown (12.2.202.132): 5 Time(s)
      unknown (121.241.248.8): 5 Time(s)
      unknown (164.77.246.170): 5 Time(s)
      unknown (165.138.79.139): 5 Time(s)
      unknown (173-25-145-135.client.mchsi.com): 5 Time(s)
      unknown (190.136.179.10): 5 Time(s)
      unknown (190.144.55.163): 5 Time(s)
      unknown (190.146.155.141): 5 Time(s)
      unknown (190.41.166.173): 5 Time(s)
      unknown (195-72-210-188-static.intercom.it): 5 Time(s)
      unknown (200.123.183.90): 5 Time(s)
      unknown (200.159.111.6): 5 Time(s)
      unknown (200.178.139.2): 5 Time(s)
      unknown (200.178.96.20): 5 Time(s)
      unknown (201.47.232.58.static.gvt.net.br): 5 Time(s)
      unknown (201.89.83.200): 5 Time(s)
      unknown (211.142.187.90): 5 Time(s)
      unknown (211.99.218.2): 5 Time(s)
      unknown (213.83.63.110): 5 Time(s)
      unknown (216.244.157.116): 5 Time(s)
      unknown (217.71.204.10): 5 Time(s)
      unknown (220.95.207.25): 5 Time(s)
      unknown (222.124.178.158): 5 Time(s)
      unknown (222.68.200.52): 5 Time(s)
      unknown (225.red-217-126-40.staticip.rima-tde.net): 5 Time(s)
      unknown (230.23.202.62.fix.bluewin.ch): 5 Time(s)
      unknown (58.223.237.3): 5 Time(s)
      unknown (60-248-161-181.hinet-ip.hinet.net): 5 Time(s)
      unknown (61.145.71.200): 5 Time(s)
      unknown (62.172.208.14): 5 Time(s)
      unknown (62.28.111.213): 5 Time(s)
      unknown (62.87.236.225): 5 Time(s)
      unknown (69.169.168.200.provo.static.broadweavenetworks.net): 5 Time(s)
      unknown (77.229.4.226): 5 Time(s)
      unknown (80.118.132.91): 5 Time(s)
      unknown (80.234.33.214): 5 Time(s)
      unknown (83-64-232-194.baumgarten.xdsl-line.inode.at): 5 Time(s)
      unknown (83.172.20.149): 5 Time(s)
      unknown (85-124-35-179.static.xdsl-line.inode.at): 5 Time(s)
      unknown (87-194-149-56.bethere.co.uk): 5 Time(s)
      unknown (88.247.110.61): 5 Time(s)
      unknown (89.223.97.100): 5 Time(s)
      unknown (89.223.99.190): 5 Time(s)
      unknown (91.150.139.56): 5 Time(s)
      unknown (94.26.30.145): 5 Time(s)
      unknown (ac251.internetdsl.tpnet.pl): 5 Time(s)
      unknown (accmx.aim-cc.com): 5 Time(s)
      unknown (aol26.internetdsl.tpnet.pl): 5 Time(s)
      unknown (aufwaerts-verlag.de): 5 Time(s)
      unknown (chello212186105014.11.vie.surfer.at): 5 Time(s)
      unknown (dialbs-088-079-143-068.static.arcor-ip.net): 5 Time(s)
      unknown (fxip-00364.externet.hu): 5 Time(s)
      unknown (had138.internetdsl.tpnet.pl): 5 Time(s)
      unknown (hlava.com): 5 Time(s)
      unknown (hmv90.internetdsl.tpnet.pl): 5 Time(s)
      unknown (ip-88-152-67-31.unitymediagroup.de): 5 Time(s)
      unknown (ip72-211-253-15.oc.oc.cox.net): 5 Time(s)
      unknown (jxeelab.iasi.rdsnet.ro): 5 Time(s)
      unknown (lvps87-230-17-244.dedicated.hosteurope.de): 5 Time(s)
      unknown (mail.beco.com.ve): 5 Time(s)
      unknown (mail.gns.su): 5 Time(s)
      unknown (modemcable038.177-70-69.static.videotron.ca): 5 Time(s)
      unknown (pool-141-158-240-37.phil.east.verizon.net): 5 Time(s)
      unknown (port-87-193-191-148.static.qsc.de): 5 Time(s)
      unknown (projectus.com.br): 5 Time(s)
      unknown (static-217-133-80-15.clienti.tiscali.it): 5 Time(s)
      unknown (static-87-105-212-210.ssp.dialog.net.pl): 5 Time(s)
      unknown (zeus.cz.insideidc.com): 5 Time(s)
      unknown (zux221-015-164.adsl.green.ch): 5 Time(s)
      postgres (80.78.182.13): 4 Time(s)
      unknown (122.166.101.134): 4 Time(s)
      unknown (189-19-58-95.dsl.telesp.net.br): 4 Time(s)
      unknown (190.26.91.246): 4 Time(s)
      unknown (190.68.117.90): 4 Time(s)
      unknown (201.232.54.168): 4 Time(s)
      unknown (64.202.240.124): 4 Time(s)
      unknown (86.105.177.4): 4 Time(s)
      unknown (87.213.38.98): 4 Time(s)
      unknown (aurora.anum.tuwien.ac.at): 4 Time(s)
      unknown (ip160.theneptune.sea.ygnition.net): 4 Time(s)
      unknown (laubervilliers-153-52-15-39.w217-128.abo.wanadoo.fr): 4 Time(s)
      nobody (202.103.52.146): 3 Time(s)
      nobody (dubserver.globalcafe.ie): 3 Time(s)
      nobody (kreta136.myserver.t-online.de): 3 Time(s)
      nobody (sa9.enterprisewizard.com): 3 Time(s)
      nobody (server71114.xantronnet.de): 3 Time(s)
      unknown (113.100.130.39): 3 Time(s)
      unknown (114.247.18.9): 3 Time(s)
      unknown (116.124.178.120): 3 Time(s)
      unknown (118.142.17.34): 3 Time(s)
      unknown (125.88.99.41): 3 Time(s)
      unknown (140.125.90.217): 3 Time(s)
      unknown (141-220-124-91.pool.ukrtel.net): 3 Time(s)
      unknown (169.red-217-126-153.staticip.rima-tde.net): 3 Time(s)
      unknown (173-14-43-193-michigan.hfc.comcastbusiness.net): 3 Time(s)
      unknown (187.20.122.215): 3 Time(s)
      unknown (189.77.95.205): 3 Time(s)
      unknown (190.144.55.164): 3 Time(s)
      unknown (195-23-46-202.static.net.novis.pt): 3 Time(s)
      unknown (200-150-176-218.static-corp.ajato.com.br): 3 Time(s)
      unknown (200.55.214.219): 3 Time(s)
      unknown (201-24-133-98.gnace300.ipd.brasiltelecom.net.br): 3 Time(s)
      unknown (201.82.193.8): 3 Time(s)
      unknown (209.85.66.238): 3 Time(s)
      unknown (209.85.66.241): 3 Time(s)
      unknown (213.169.56.45): 3 Time(s)
      unknown (217-159-148-74-dsl.est.estpak.ee): 3 Time(s)
      unknown (218.207.69.167): 3 Time(s)
      unknown (31.red-80-59-124.staticip.rima-tde.net): 3 Time(s)
      unknown (88.151.76.10): 3 Time(s)
      unknown (90.182.107.194): 3 Time(s)
      unknown (94.143.192.243): 3 Time(s)
      unknown (adsl-71-140-125-154.dsl.sndg02.pacbell.net): 3 Time(s)
      unknown (bicomix.bicomix.hu): 3 Time(s)
      unknown (c-67-169-75-27.hsd1.ca.comcast.net): 3 Time(s)
      unknown (c-76-17-182-127.hsd1.mn.comcast.net): 3 Time(s)
      unknown (host-148-032.consiagnet.it): 3 Time(s)
      unknown (ip-137-225.sn2.eutelia.it): 3 Time(s)
      unknown (ip-174-142-116-10.static.privatedns.com): 3 Time(s)
      unknown (mail.opaloperu.com): 3 Time(s)
      unknown (mail2.fortalezainmuebles.com): 3 Time(s)
      unknown (ns.swnet.info): 3 Time(s)
      unknown (osipov.sscc.ru): 3 Time(s)
      unknown (pyrobatyst.svit.gtsi.sk): 3 Time(s)
      unknown (s01060016b6199523.cg.shawcable.net): 3 Time(s)
      unknown (server1.p7hosting.de): 3 Time(s)
      unknown (srvmail.paredescano.com): 3 Time(s)
      unknown (static-87-79-237-78.netcologne.de): 3 Time(s)
      unknown (www.stecolflex.ro): 3 Time(s)
      unknown (190.144.116.85): 2 Time(s)
      unknown (190.41.137.64): 2 Time(s)
      unknown (193.124.218.3): 2 Time(s)
      unknown (200.51.93.29): 2 Time(s)
      unknown (200.57.32.47): 2 Time(s)
      unknown (202.185.77.110): 2 Time(s)
      unknown (211.143.79.86): 2 Time(s)
      unknown (212.184.201.141): 2 Time(s)
      unknown (221.236.6.198): 2 Time(s)
      unknown (58.223.238.5): 2 Time(s)
      unknown (75.97.94.202.res-cmts.senj.ptd.net): 2 Time(s)
      unknown (ggy210.internetdsl.tpnet.pl): 2 Time(s)
      unknown (iw4.internetdsl.tpnet.pl): 2 Time(s)
      unknown (mail.credirebaja.com): 2 Time(s)
      unknown (mail.darek.com.pl): 2 Time(s)
      unknown (mail.dawda.co.ug): 2 Time(s)
      unknown (pd907d77b.dip0.t-ipconnect.de): 2 Time(s)
      news (geatsun1.upct.es): 1 Time(s)
      postgres (212.0.127.98): 1 Time(s)
      postgres (vostokmv.ru): 1 Time(s)
      unknown (115.168.77.219): 1 Time(s)
      unknown (148.243.156.138): 1 Time(s)
      unknown (161.24.254.102): 1 Time(s)
      unknown (168.red-213-4-34.staticip.rima-tde.net): 1 Time(s)
      unknown (190.39.165.193): 1 Time(s)
      unknown (193.124.218.6): 1 Time(s)
      unknown (200.175.156.174.static.gvt.net.br): 1 Time(s)
      unknown (203.197.128.205): 1 Time(s)
      unknown (218.201.73.38): 1 Time(s)
      unknown (221.202.69.134): 1 Time(s)
      unknown (222.68.197.235): 1 Time(s)
      unknown (58.223.238.6): 1 Time(s)
      unknown (61.29.122.37): 1 Time(s)
      unknown (77-21-222-213-dynip.superkabel.de): 1 Time(s)
      unknown (88-158-154-162.asconet.ro): 1 Time(s)
      unknown (does.summitoh.net): 1 Time(s)
      unknown (hsi-kbw-217-008-061-146.hsi.kabelbw.de): 1 Time(s)
      unknown (mail.direitonovo.com.br): 1 Time(s)
      unknown (minbari.wipgames.com): 1 Time(s)
      unknown (mvx-200-196-50-26.mundivox.com): 1 Time(s)
      unknown (schumann.ugr.es): 1 Time(s)
      unknown (static-217-133-94-17.clienti.tiscali.it): 1 Time(s)
   Invalid Users:
      Unknown Account: 630 Time(s)

su:
   Sessions Opened:
      (uid=0) -> nobody: 1 Time(s)


 ---------------------- pam_unix End ------------------------- 


 --------------------- sendmail Begin ------------------------ 


ERROR: Could not open /etc/mail/local-host-names

ERROR: Could not open /etc/mail/access


Message Size Distribution:
Range          # Msgs       KBytes
0 - 10k             0            0
10k - 20k           0            0
20k - 50k           0            0
50k - 100k          0            0
100k - 500k         0            0
500k - 1Mb          0            0
1Mb - 2Mb           0            0
2Mb - 5Mb           0            0
5Mb - 10Mb          0            0
10Mb+               0            0
----------------------------------
TOTAL               0            0

 ---------------------- sendmail End ------------------------- 


 --------------------- SSHD Begin ------------------------ 


Couldn't resolve these IPs:
   091150139056.nat-ng.tsi.tychy.pl: 5 Time(s)
   158.subnet222-124-178.astinet.telkom.net.id: 5 Time(s)
   190-39-165-193.dyn.dsl.cantv.net(190.39.165.193): 1 Time(s)
   200-159-111-6.customer.tdatabrasil.net.br: 5 Time(s)
   91-132-118-80.kaptech.net(80.118.132.91): 5 Time(s)
   94-143-192-243.elcat.kg: 8 Time(s)
   abts-kk-static-134.101.166.122.airtelbroadband.in: 4 Time(s)
   adsl-pool2-100.metrotel.net.co: 5 Time(s)
   bb147ad7.virtua.com.br: 3 Time(s)
   bu1-1.1blu.de(213.83.63.110): 5 Time(s)
   c952c108.virtua.com.br: 3 Time(s)
   corporat190-026091246.sta.etb.net.co: 4 Time(s)
   customer-static-123-183-90.iplannetworks.net: 5 Time(s)
   dns: 5 Time(s)
   dsl-61-29-122-37.request.com.au: 1 Time(s)
   dsl88-247-28221.ttnet.net.tr: 5 Time(s)
   ev1s-209-85-66-238.theplanet.com: 3 Time(s)
   ev1s-209-85-66-240.theplanet.com: 8 Time(s)
   ev1s-209-85-66-241.theplanet.com: 3 Time(s)
   host-149.sibinet.com: 5 Time(s)
   host10.190-136-179.telecom.net.ar: 5 Time(s)
   host29.advance.com.ar: 2 Time(s)
   illchn-static-203.197.128.205.static.vsnl.net.in: 1 Time(s)
   ip-81-210-113-66.netia.com.pl: 10 Time(s)
   ip76-10.comteam.at: 3 Time(s)
   mail.hendricks.k12.in.us(165.138.79.139): 5 Time(s)
   mail.nedschroef-al.de(62.153.136.122): 4 Time(s)
   mail.nedschroef.de(62.153.136.122): 3 Time(s)
   na-148-243-156-138.na.avantel.net.mx: 1 Time(s)
   smtp.elemelec.com.co: 5 Time(s)
   static-226-4-229-77.ipcom.comunitel.net: 5 Time(s)
   static-57-219-235-87.ipcom.comunitel.net: 6 Time(s)
   static-adsl201-232-54-168.epm.net.co(201.232.54.168): 4 Time(s)
   static-ip-cr190146155141.cable.net.co: 5 Time(s)
   unlabelled-98-38-213-87.versatel.net: 4 Time(s)

Didn't receive an ident from these IPs:
   59.108.94.32: 2 Time(s)

Failed logins from these:
   admin/password from 121.14.118.4: 1 Time(s)
   fluffy/password from 121.14.118.4: 1 Time(s)
   guest/password from 121.14.118.4: 1 Time(s)
   neal/keyboard-interactive/pam from 122.166.101.134: 4 Time(s)
   neil/keyboard-interactive/pam from 86.105.177.4: 4 Time(s)
   newuser/keyboard-interactive/pam from 69.130.7.115: 5 Time(s)
   newuser/keyboard-interactive/pam from 80.188.171.82: 5 Time(s)
   nic/keyboard-interactive/pam from 62.87.236.225: 5 Time(s)
   nic/keyboard-interactive/pam from 69.70.177.38: 5 Time(s)
   nick/keyboard-interactive/pam from 212.186.105.14: 5 Time(s)
   nick/keyboard-interactive/pam from 87.230.17.244: 5 Time(s)
   nico/keyboard-interactive/pam from 61.145.71.200: 5 Time(s)
   nico/keyboard-interactive/pam from 89.223.97.100: 5 Time(s)
   nicolas/keyboard-interactive/pam from 77.229.4.226: 5 Time(s)
   nicole/keyboard-interactive/pam from 80.152.174.204: 5 Time(s)
   nicole/keyboard-interactive/pam from 87.193.191.148: 5 Time(s)
   night/keyboard-interactive/pam from 80.93.124.2: 3 Time(s)
   nikki/keyboard-interactive/pam from 209.85.66.241: 3 Time(s)
   niklas/keyboard-interactive/pam from 88.151.76.10: 3 Time(s)
   niko/keyboard-interactive/pam from 190.104.152.110: 3 Time(s)
   niko/keyboard-interactive/pam from 83.149.148.32: 3 Time(s)
   nilson/keyboard-interactive/pam from 94.143.192.243: 3 Time(s)
   nina/keyboard-interactive/pam from 174.142.116.10: 3 Time(s)
   nml/keyboard-interactive/pam from 201.24.133.98: 3 Time(s)
   nms/keyboard-interactive/pam from 91.124.220.141: 3 Time(s)
   nnn/keyboard-interactive/pam from 212.192.181.44: 3 Time(s)
   noc/keyboard-interactive/pam from 190.144.55.163: 5 Time(s)
   noc/keyboard-interactive/pam from 78.102.129.254: 5 Time(s)
   noel/keyboard-interactive/pam from 200.123.183.90: 5 Time(s)
   nono/keyboard-interactive/pam from 113.100.130.34: 5 Time(s)
   nora/keyboard-interactive/pam from 201.47.232.58: 5 Time(s)
   norbert/keyboard-interactive/pam from 86.124.35.108: 5 Time(s)
   nori/keyboard-interactive/pam from 87.194.149.56: 5 Time(s)
   norma/keyboard-interactive/pam from 82.150.35.61: 3 Time(s)
   notes/keyboard-interactive/pam from 80.59.124.31: 3 Time(s)
   notes/keyboard-interactive/pam from 90.182.107.194: 3 Time(s)
   ns/keyboard-interactive/pam from 200.55.214.219: 3 Time(s)
   ntcadmin/keyboard-interactive/pam from 86.35.251.92: 3 Time(s)
   ntop/keyboard-interactive/pam from 62.153.136.122: 3 Time(s)
   nuri/keyboard-interactive/pam from 85.248.18.180: 3 Time(s)
   nurse/keyboard-interactive/pam from 70.73.60.20: 3 Time(s)
   nuucp/keyboard-interactive/pam from 71.140.125.154: 3 Time(s)
   ocs/keyboard-interactive/pam from 193.124.218.3: 2 Time(s)
   ocs/keyboard-interactive/pam from 193.124.218.6: 1 Time(s)
   office/keyboard-interactive/pam from 161.24.254.102: 1 Time(s)
   office/keyboard-interactive/pam from 189.19.58.95: 4 Time(s)
   office/keyboard-interactive/pam from 190.68.117.90: 4 Time(s)
   office/keyboard-interactive/pam from 201.232.54.168: 4 Time(s)
   office1/keyboard-interactive/pam from 128.131.37.10: 4 Time(s)
   office2/keyboard-interactive/pam from 76.17.182.127: 3 Time(s)
   oikawa/keyboard-interactive/pam from 62.153.136.122: 4 Time(s)
   oksana/keyboard-interactive/pam from 81.210.113.66: 5 Time(s)
   ola/keyboard-interactive/pam from 200.178.96.20: 5 Time(s)
   oleg/keyboard-interactive/pam from 64.202.240.124: 4 Time(s)
   op/keyboard-interactive/pam from 203.197.128.205: 1 Time(s)
   open/keyboard-interactive/pam from 217.8.61.146: 1 Time(s)
   openbsd/keyboard-interactive/pam from 115.168.77.219: 1 Time(s)
   openvpn/keyboard-interactive/pam from 218.201.73.38: 1 Time(s)
   oper/keyboard-interactive/pam from 211.142.187.90: 5 Time(s)
   oper/keyboard-interactive/pam from 80.53.160.251: 5 Time(s)
   operador/keyboard-interactive/pam from 121.241.248.8: 5 Time(s)
   operador/keyboard-interactive/pam from 220.95.207.25: 5 Time(s)
   operator1/keyboard-interactive/pam from 190.216.246.115: 5 Time(s)
   oracle/keyboard-interactive/pam from 116.124.178.120: 3 Time(s)
   oracle/keyboard-interactive/pam from 118.142.17.34: 3 Time(s)
   oracle/keyboard-interactive/pam from 164.77.246.170: 5 Time(s)
   oracle/keyboard-interactive/pam from 173.14.43.193: 3 Time(s)
   oracle/keyboard-interactive/pam from 173.25.145.135: 5 Time(s)
   oracle/keyboard-interactive/pam from 187.20.122.215: 3 Time(s)
   oracle/keyboard-interactive/pam from 190.81.71.218: 3 Time(s)
   oracle/keyboard-interactive/pam from 200.150.176.218: 3 Time(s)
   oracle/keyboard-interactive/pam from 200.159.111.6: 5 Time(s)
   oracle/keyboard-interactive/pam from 209.85.66.240: 3 Time(s)
   oracle/keyboard-interactive/pam from 211.99.218.2: 5 Time(s)
   oracle/keyboard-interactive/pam from 217.128.110.39: 4 Time(s)
   oracle/keyboard-interactive/pam from 62.202.23.230: 5 Time(s)
   oracle/keyboard-interactive/pam from 79.188.73.90: 5 Time(s)
   orders/keyboard-interactive/pam from 217.126.153.169: 3 Time(s)
   os/keyboard-interactive/pam from 89.238.76.121: 3 Time(s)
   oscar/keyboard-interactive/pam from 83.211.137.225: 3 Time(s)
   oscar/keyboard-interactive/pam from 88.152.67.31: 3 Time(s)
   oskar/keyboard-interactive/pam from 72.211.253.15: 5 Time(s)
   otrs/keyboard-interactive/pam from 80.85.55.100: 5 Time(s)
   p01/keyboard-interactive/pam from 89.223.99.190: 5 Time(s)
   p2p/keyboard-interactive/pam from 85.124.35.179: 5 Time(s)
   p3scan/keyboard-interactive/pam from 140.125.90.217: 3 Time(s)
   pablo/keyboard-interactive/pam from 200.230.30.2: 5 Time(s)
   paco/keyboard-interactive/pam from 60.248.161.181: 5 Time(s)
   pah/keyboard-interactive/pam from 201.82.193.8: 3 Time(s)
   pai/keyboard-interactive/pam from 91.103.25.74: 3 Time(s)
   pam/keyboard-interactive/pam from 190.41.77.49: 3 Time(s)
   pan/keyboard-interactive/pam from 200.175.156.174: 1 Time(s)
   panasonic/keyboard-interactive/pam from 113.100.130.39: 3 Time(s)
   panda/keyboard-interactive/pam from 218.207.69.167: 3 Time(s)
   pao/keyboard-interactive/pam from 213.169.56.45: 3 Time(s)
   paola/keyboard-interactive/pam from 189.23.183.2: 3 Time(s)
   paolo/keyboard-interactive/pam from 190.144.55.164: 3 Time(s)
   paper/keyboard-interactive/pam from 189.77.95.205: 3 Time(s)
   parent/keyboard-interactive/pam from 200.178.139.2: 5 Time(s)
   park/keyboard-interactive/pam from 222.68.200.52: 5 Time(s)
   partimag/keyboard-interactive/pam from 209.85.66.240: 5 Time(s)
   partners/keyboard-interactive/pam from 209.85.66.238: 3 Time(s)
   pascal/keyboard-interactive/pam from 87.79.237.78: 3 Time(s)
   pastor/keyboard-interactive/pam from 67.169.75.27: 3 Time(s)
   pat/keyboard-interactive/pam from 217.159.148.74: 3 Time(s)
   patricia/keyboard-interactive/pam from 195.23.46.202: 3 Time(s)
   patricia/keyboard-interactive/pam from 83.64.232.194: 5 Time(s)
   patrick/keyboard-interactive/pam from 189.23.183.2: 5 Time(s)
   patrick/keyboard-interactive/pam from 190.146.155.141: 5 Time(s)
   paul/keyboard-interactive/pam from 190.136.179.10: 5 Time(s)
   paul/keyboard-interactive/pam from 212.184.201.141: 2 Time(s)
   paul/keyboard-interactive/pam from 41.190.132.26: 2 Time(s)
   paul/keyboard-interactive/pam from 62.172.208.14: 5 Time(s)
   paul/keyboard-interactive/pam from 88.79.143.68: 5 Time(s)
   paula/keyboard-interactive/pam from 200.51.93.29: 2 Time(s)
   paula/keyboard-interactive/pam from 58.223.238.5: 2 Time(s)
   paulina/keyboard-interactive/pam from 190.41.137.64: 2 Time(s)
   pavel/keyboard-interactive/pam from 202.185.77.110: 2 Time(s)
   pavel/keyboard-interactive/pam from 81.221.15.164: 5 Time(s)
   pawel/keyboard-interactive/pam from 69.169.168.200: 5 Time(s)
   pawel/keyboard-interactive/pam from 83.12.180.210: 2 Time(s)
   payroll/keyboard-interactive/pam from 83.13.126.74: 2 Time(s)
   pc/keyboard-interactive/pam from 75.97.94.202: 2 Time(s)
   pc02/keyboard-interactive/pam from 211.143.79.86: 2 Time(s)
   pc10/keyboard-interactive/pam from 200.30.74.98: 2 Time(s)
   pc2/keyboard-interactive/pam from 88.152.67.31: 2 Time(s)
   pc3/keyboard-interactive/pam from 200.57.32.47: 2 Time(s)
   pc4/keyboard-interactive/pam from 190.144.116.85: 2 Time(s)
   pcguest/keyboard-interactive/pam from 221.236.6.198: 2 Time(s)
   pdx/keyboard-interactive/pam from 80.53.126.4: 2 Time(s)
   pe/keyboard-interactive/pam from 81.210.113.66: 5 Time(s)
   pedro/keyboard-interactive/pam from 213.132.73.140: 5 Time(s)
   pedro/keyboard-interactive/pam from 217.126.40.225: 5 Time(s)
   pedro/keyboard-interactive/pam from 62.141.33.184: 5 Time(s)
   pepe/keyboard-interactive/pam from 141.158.240.37: 5 Time(s)
   pepe/keyboard-interactive/pam from 88.247.110.61: 5 Time(s)
   pereira/keyboard-interactive/pam from 62.28.111.213: 5 Time(s)
   person/keyboard-interactive/pam from 79.187.3.138: 5 Time(s)
   peterson/keyboard-interactive/pam from 165.138.79.139: 5 Time(s)
   petra/keyboard-interactive/pam from 83.17.119.26: 5 Time(s)
   pgsql/keyboard-interactive/pam from 12.2.202.132: 5 Time(s)
   pgsql/keyboard-interactive/pam from 217.133.80.15: 5 Time(s)
   pgsql/keyboard-interactive/pam from 222.124.178.158: 5 Time(s)
   pgsql/keyboard-interactive/pam from 222.68.197.235: 1 Time(s)
   pgsql/keyboard-interactive/pam from 66.135.159.160: 4 Time(s)
   phil/keyboard-interactive/pam from 217.71.204.10: 5 Time(s)
   phone/keyboard-interactive/pam from 190.41.166.173: 5 Time(s)
   photo/keyboard-interactive/pam from 58.223.237.3: 5 Time(s)
   photo/keyboard-interactive/pam from 83.172.20.149: 5 Time(s)
   photos/keyboard-interactive/pam from 80.118.132.91: 5 Time(s)
   php/keyboard-interactive/pam from 148.243.156.138: 1 Time(s)
   phpmyadmin/keyboard-interactive/pam from 200.196.50.26: 1 Time(s)
   picture/keyboard-interactive/pam from 150.214.103.193: 1 Time(s)
   piero/keyboard-interactive/pam from 58.223.238.6: 1 Time(s)
   pierre/keyboard-interactive/pam from 190.39.165.193: 1 Time(s)
   ping/keyboard-interactive/pam from 82.66.127.131: 1 Time(s)
   pio/keyboard-interactive/pam from 88.158.154.162: 1 Time(s)
   pioneer/keyboard-interactive/pam from 221.202.69.134: 1 Time(s)
   piotr/keyboard-interactive/pam from 125.88.99.41: 3 Time(s)
   piotr/keyboard-interactive/pam from 213.4.34.168: 1 Time(s)
   piotrek/keyboard-interactive/pam from 12.236.69.2: 1 Time(s)
   piotrek/keyboard-interactive/pam from 80.234.33.214: 5 Time(s)
   piotrek/keyboard-interactive/pam from 91.150.139.56: 5 Time(s)
   pippo/keyboard-interactive/pam from 67.19.19.210: 1 Time(s)
   pixel/keyboard-interactive/pam from 217.133.94.17: 1 Time(s)
   plan/keyboard-interactive/pam from 77.21.222.213: 1 Time(s)
   platinum/keyboard-interactive/pam from 201.89.83.200: 5 Time(s)
   player/keyboard-interactive/pam from 195.72.210.188: 5 Time(s)
   pm/keyboard-interactive/pam from 190.26.91.246: 4 Time(s)
   po/keyboard-interactive/pam from 87.213.38.98: 4 Time(s)
   portal/keyboard-interactive/pam from 114.247.18.9: 3 Time(s)
   portal/keyboard-interactive/pam from 217.7.215.123: 2 Time(s)
   pos/keyboard-interactive/pam from 80.152.174.204: 5 Time(s)
   pos/keyboard-interactive/pam from 87.105.212.210: 5 Time(s)
   postfix/keyboard-interactive/pam from 61.29.122.37: 1 Time(s)
   postgrey/keyboard-interactive/pam from 216.244.157.116: 5 Time(s)
   postgrey/keyboard-interactive/pam from 80.93.124.2: 5 Time(s)
   postmaster/keyboard-interactive/pam from 213.83.63.110: 5 Time(s)
   postmaster/keyboard-interactive/pam from 94.26.30.145: 5 Time(s)
   root/password from 121.14.118.4: 1 Time(s)
   root/password from 60.217.229.220: 41 Time(s)
   root/password from 78.46.75.40: 3 Time(s)
   test/password from 121.14.118.4: 1 Time(s)

Illegal users from these:
   admin/none from 121.14.118.4: 1 Time(s)
   admin/password from 121.14.118.4: 1 Time(s)
   fluffy/none from 121.14.118.4: 1 Time(s)
   fluffy/password from 121.14.118.4: 1 Time(s)
   guest/none from 121.14.118.4: 1 Time(s)
   guest/password from 121.14.118.4: 1 Time(s)
   neal/keyboard-interactive/pam from 122.166.101.134: 4 Time(s)
   neal/none from 122.166.101.134: 4 Time(s)
   neil/keyboard-interactive/pam from 86.105.177.4: 4 Time(s)
   neil/none from 86.105.177.4: 4 Time(s)
   newuser/keyboard-interactive/pam from 69.130.7.115: 5 Time(s)
   newuser/keyboard-interactive/pam from 80.188.171.82: 5 Time(s)
   newuser/none from 69.130.7.115: 5 Time(s)
   newuser/none from 80.188.171.82: 5 Time(s)
   nic/keyboard-interactive/pam from 62.87.236.225: 5 Time(s)
   nic/keyboard-interactive/pam from 69.70.177.38: 5 Time(s)
   nic/none from 62.87.236.225: 5 Time(s)
   nic/none from 69.70.177.38: 5 Time(s)
   nick/keyboard-interactive/pam from 212.186.105.14: 5 Time(s)
   nick/keyboard-interactive/pam from 87.230.17.244: 5 Time(s)
   nick/none from 212.186.105.14: 5 Time(s)
   nick/none from 87.230.17.244: 5 Time(s)
   nico/keyboard-interactive/pam from 61.145.71.200: 5 Time(s)
   nico/keyboard-interactive/pam from 89.223.97.100: 5 Time(s)
   nico/none from 61.145.71.200: 5 Time(s)
   nico/none from 89.223.97.100: 5 Time(s)
   nicolas/keyboard-interactive/pam from 77.229.4.226: 5 Time(s)
   nicolas/none from 77.229.4.226: 5 Time(s)
   nicole/keyboard-interactive/pam from 80.152.174.204: 5 Time(s)
   nicole/keyboard-interactive/pam from 87.193.191.148: 5 Time(s)
   nicole/none from 80.152.174.204: 5 Time(s)
   nicole/none from 87.193.191.148: 5 Time(s)
   night/keyboard-interactive/pam from 80.93.124.2: 3 Time(s)
   night/none from 80.93.124.2: 3 Time(s)
   nikki/keyboard-interactive/pam from 209.85.66.241: 3 Time(s)
   nikki/none from 209.85.66.241: 3 Time(s)
   niklas/keyboard-interactive/pam from 88.151.76.10: 3 Time(s)
   niklas/none from 88.151.76.10: 3 Time(s)
   niko/keyboard-interactive/pam from 190.104.152.110: 3 Time(s)
   niko/keyboard-interactive/pam from 83.149.148.32: 3 Time(s)
   niko/none from 190.104.152.110: 3 Time(s)
   niko/none from 83.149.148.32: 3 Time(s)
   nilson/keyboard-interactive/pam from 94.143.192.243: 3 Time(s)
   nilson/none from 94.143.192.243: 3 Time(s)
   nina/keyboard-interactive/pam from 174.142.116.10: 3 Time(s)
   nina/none from 174.142.116.10: 3 Time(s)
   nml/keyboard-interactive/pam from 201.24.133.98: 3 Time(s)
   nml/none from 201.24.133.98: 3 Time(s)
   nms/keyboard-interactive/pam from 91.124.220.141: 3 Time(s)
   nms/none from 91.124.220.141: 3 Time(s)
   nnn/keyboard-interactive/pam from 212.192.181.44: 3 Time(s)
   nnn/none from 212.192.181.44: 3 Time(s)
   noc/keyboard-interactive/pam from 190.144.55.163: 5 Time(s)
   noc/keyboard-interactive/pam from 78.102.129.254: 5 Time(s)
   noc/none from 190.144.55.163: 5 Time(s)
   noc/none from 78.102.129.254: 5 Time(s)
   noel/keyboard-interactive/pam from 200.123.183.90: 5 Time(s)
   noel/none from 200.123.183.90: 5 Time(s)
   nono/keyboard-interactive/pam from 113.100.130.34: 5 Time(s)
   nono/none from 113.100.130.34: 5 Time(s)
   nora/keyboard-interactive/pam from 201.47.232.58: 5 Time(s)
   nora/none from 201.47.232.58: 5 Time(s)
   norbert/keyboard-interactive/pam from 86.124.35.108: 5 Time(s)
   norbert/none from 86.124.35.108: 5 Time(s)
   nori/keyboard-interactive/pam from 87.194.149.56: 5 Time(s)
   nori/none from 87.194.149.56: 5 Time(s)
   norma/keyboard-interactive/pam from 82.150.35.61: 3 Time(s)
   norma/none from 82.150.35.61: 3 Time(s)
   notes/keyboard-interactive/pam from 80.59.124.31: 3 Time(s)
   notes/keyboard-interactive/pam from 90.182.107.194: 3 Time(s)
   notes/none from 80.59.124.31: 3 Time(s)
   notes/none from 90.182.107.194: 3 Time(s)
   ns/keyboard-interactive/pam from 200.55.214.219: 3 Time(s)
   ns/none from 200.55.214.219: 3 Time(s)
   ntcadmin/keyboard-interactive/pam from 86.35.251.92: 3 Time(s)
   ntcadmin/none from 86.35.251.92: 3 Time(s)
   ntop/keyboard-interactive/pam from 62.153.136.122: 3 Time(s)
   ntop/none from 62.153.136.122: 3 Time(s)
   nuri/keyboard-interactive/pam from 85.248.18.180: 3 Time(s)
   nuri/none from 85.248.18.180: 3 Time(s)
   nurse/keyboard-interactive/pam from 70.73.60.20: 3 Time(s)
   nurse/none from 70.73.60.20: 3 Time(s)
   nuucp/keyboard-interactive/pam from 71.140.125.154: 3 Time(s)
   nuucp/none from 71.140.125.154: 3 Time(s)
   ocs/keyboard-interactive/pam from 193.124.218.3: 2 Time(s)
   ocs/keyboard-interactive/pam from 193.124.218.6: 1 Time(s)
   ocs/none from 193.124.218.3: 2 Time(s)
   ocs/none from 193.124.218.6: 1 Time(s)
   office/keyboard-interactive/pam from 161.24.254.102: 1 Time(s)
   office/keyboard-interactive/pam from 189.19.58.95: 4 Time(s)
   office/keyboard-interactive/pam from 190.68.117.90: 4 Time(s)
   office/keyboard-interactive/pam from 201.232.54.168: 4 Time(s)
   office/none from 161.24.254.102: 1 Time(s)
   office/none from 189.19.58.95: 4 Time(s)
   office/none from 190.68.117.90: 4 Time(s)
   office/none from 201.232.54.168: 4 Time(s)
   office1/keyboard-interactive/pam from 128.131.37.10: 4 Time(s)
   office1/none from 128.131.37.10: 4 Time(s)
   office2/keyboard-interactive/pam from 76.17.182.127: 3 Time(s)
   office2/none from 76.17.182.127: 3 Time(s)
   oikawa/keyboard-interactive/pam from 62.153.136.122: 4 Time(s)
   oikawa/none from 62.153.136.122: 4 Time(s)
   oksana/keyboard-interactive/pam from 81.210.113.66: 5 Time(s)
   oksana/none from 81.210.113.66: 5 Time(s)
   ola/keyboard-interactive/pam from 200.178.96.20: 5 Time(s)
   ola/none from 200.178.96.20: 5 Time(s)
   oleg/keyboard-interactive/pam from 64.202.240.124: 4 Time(s)
   oleg/none from 64.202.240.124: 4 Time(s)
   op/keyboard-interactive/pam from 203.197.128.205: 1 Time(s)
   op/none from 203.197.128.205: 1 Time(s)
   open/keyboard-interactive/pam from 217.8.61.146: 1 Time(s)
   open/none from 217.8.61.146: 1 Time(s)
   openbsd/keyboard-interactive/pam from 115.168.77.219: 1 Time(s)
   openbsd/none from 115.168.77.219: 1 Time(s)
   openvpn/keyboard-interactive/pam from 218.201.73.38: 1 Time(s)
   openvpn/none from 218.201.73.38: 1 Time(s)
   oper/keyboard-interactive/pam from 211.142.187.90: 5 Time(s)
   oper/keyboard-interactive/pam from 80.53.160.251: 5 Time(s)
   oper/none from 211.142.187.90: 5 Time(s)
   oper/none from 80.53.160.251: 5 Time(s)
   operador/keyboard-interactive/pam from 121.241.248.8: 5 Time(s)
   operador/keyboard-interactive/pam from 220.95.207.25: 5 Time(s)
   operador/none from 121.241.248.8: 5 Time(s)
   operador/none from 220.95.207.25: 5 Time(s)
   operator1/keyboard-interactive/pam from 190.216.246.115: 5 Time(s)
   operator1/none from 190.216.246.115: 5 Time(s)
   oracle/keyboard-interactive/pam from 116.124.178.120: 3 Time(s)
   oracle/keyboard-interactive/pam from 118.142.17.34: 3 Time(s)
   oracle/keyboard-interactive/pam from 164.77.246.170: 5 Time(s)
   oracle/keyboard-interactive/pam from 173.14.43.193: 3 Time(s)
   oracle/keyboard-interactive/pam from 173.25.145.135: 5 Time(s)
   oracle/keyboard-interactive/pam from 187.20.122.215: 3 Time(s)
   oracle/keyboard-interactive/pam from 190.81.71.218: 3 Time(s)
   oracle/keyboard-interactive/pam from 200.150.176.218: 3 Time(s)
   oracle/keyboard-interactive/pam from 200.159.111.6: 5 Time(s)
   oracle/keyboard-interactive/pam from 209.85.66.240: 3 Time(s)
   oracle/keyboard-interactive/pam from 211.99.218.2: 5 Time(s)
   oracle/keyboard-interactive/pam from 217.128.110.39: 4 Time(s)
   oracle/keyboard-interactive/pam from 62.202.23.230: 5 Time(s)
   oracle/keyboard-interactive/pam from 79.188.73.90: 5 Time(s)
   oracle/none from 116.124.178.120: 3 Time(s)
   oracle/none from 118.142.17.34: 3 Time(s)
   oracle/none from 164.77.246.170: 5 Time(s)
   oracle/none from 173.14.43.193: 3 Time(s)
   oracle/none from 173.25.145.135: 5 Time(s)
   oracle/none from 187.20.122.215: 3 Time(s)
   oracle/none from 190.81.71.218: 3 Time(s)
   oracle/none from 200.150.176.218: 3 Time(s)
   oracle/none from 200.159.111.6: 5 Time(s)
   oracle/none from 209.85.66.240: 3 Time(s)
   oracle/none from 211.99.218.2: 5 Time(s)
   oracle/none from 217.128.110.39: 4 Time(s)
   oracle/none from 62.202.23.230: 5 Time(s)
   oracle/none from 79.188.73.90: 5 Time(s)
   orders/keyboard-interactive/pam from 217.126.153.169: 3 Time(s)
   orders/none from 217.126.153.169: 3 Time(s)
   os/keyboard-interactive/pam from 89.238.76.121: 3 Time(s)
   os/none from 89.238.76.121: 3 Time(s)
   oscar/keyboard-interactive/pam from 83.211.137.225: 3 Time(s)
   oscar/keyboard-interactive/pam from 88.152.67.31: 3 Time(s)
   oscar/none from 83.211.137.225: 3 Time(s)
   oscar/none from 88.152.67.31: 3 Time(s)
   oskar/keyboard-interactive/pam from 72.211.253.15: 5 Time(s)
   oskar/none from 72.211.253.15: 5 Time(s)
   otrs/keyboard-interactive/pam from 80.85.55.100: 5 Time(s)
   otrs/none from 80.85.55.100: 5 Time(s)
   p01/keyboard-interactive/pam from 89.223.99.190: 5 Time(s)
   p01/none from 89.223.99.190: 5 Time(s)
   p2p/keyboard-interactive/pam from 85.124.35.179: 5 Time(s)
   p2p/none from 85.124.35.179: 5 Time(s)
   p3scan/keyboard-interactive/pam from 140.125.90.217: 3 Time(s)
   p3scan/none from 140.125.90.217: 3 Time(s)
   pablo/keyboard-interactive/pam from 200.230.30.2: 5 Time(s)
   pablo/none from 200.230.30.2: 5 Time(s)
   paco/keyboard-interactive/pam from 60.248.161.181: 5 Time(s)
   paco/none from 60.248.161.181: 5 Time(s)
   pah/keyboard-interactive/pam from 201.82.193.8: 3 Time(s)
   pah/none from 201.82.193.8: 3 Time(s)
   pai/keyboard-interactive/pam from 91.103.25.74: 3 Time(s)
   pai/none from 91.103.25.74: 3 Time(s)
   pam/keyboard-interactive/pam from 190.41.77.49: 3 Time(s)
   pam/none from 190.41.77.49: 3 Time(s)
   pan/keyboard-interactive/pam from 200.175.156.174: 1 Time(s)
   pan/none from 200.175.156.174: 1 Time(s)
   panasonic/keyboard-interactive/pam from 113.100.130.39: 3 Time(s)
   panasonic/none from 113.100.130.39: 3 Time(s)
   panda/keyboard-interactive/pam from 218.207.69.167: 3 Time(s)
   panda/none from 218.207.69.167: 3 Time(s)
   pao/keyboard-interactive/pam from 213.169.56.45: 3 Time(s)
   pao/none from 213.169.56.45: 3 Time(s)
   paola/keyboard-interactive/pam from 189.23.183.2: 3 Time(s)
   paola/none from 189.23.183.2: 3 Time(s)
   paolo/keyboard-interactive/pam from 190.144.55.164: 3 Time(s)
   paolo/none from 190.144.55.164: 3 Time(s)
   paper/keyboard-interactive/pam from 189.77.95.205: 3 Time(s)
   paper/none from 189.77.95.205: 3 Time(s)
   parent/keyboard-interactive/pam from 200.178.139.2: 5 Time(s)
   parent/none from 200.178.139.2: 5 Time(s)
   park/keyboard-interactive/pam from 222.68.200.52: 5 Time(s)
   park/none from 222.68.200.52: 5 Time(s)
   partimag/keyboard-interactive/pam from 209.85.66.240: 5 Time(s)
   partimag/none from 209.85.66.240: 5 Time(s)
   partners/keyboard-interactive/pam from 209.85.66.238: 3 Time(s)
   partners/none from 209.85.66.238: 3 Time(s)
   pascal/keyboard-interactive/pam from 87.79.237.78: 3 Time(s)
   pascal/none from 87.79.237.78: 3 Time(s)
   pastor/keyboard-interactive/pam from 67.169.75.27: 3 Time(s)
   pastor/none from 67.169.75.27: 3 Time(s)
   pat/keyboard-interactive/pam from 217.159.148.74: 3 Time(s)
   pat/none from 217.159.148.74: 3 Time(s)
   patricia/keyboard-interactive/pam from 195.23.46.202: 3 Time(s)
   patricia/keyboard-interactive/pam from 83.64.232.194: 5 Time(s)
   patricia/none from 195.23.46.202: 3 Time(s)
   patricia/none from 83.64.232.194: 5 Time(s)
   patrick/keyboard-interactive/pam from 189.23.183.2: 5 Time(s)
   patrick/keyboard-interactive/pam from 190.146.155.141: 5 Time(s)
   patrick/none from 189.23.183.2: 5 Time(s)
   patrick/none from 190.146.155.141: 5 Time(s)
   paul/keyboard-interactive/pam from 190.136.179.10: 5 Time(s)
   paul/keyboard-interactive/pam from 212.184.201.141: 2 Time(s)
   paul/keyboard-interactive/pam from 41.190.132.26: 2 Time(s)
   paul/keyboard-interactive/pam from 62.172.208.14: 5 Time(s)
   paul/keyboard-interactive/pam from 88.79.143.68: 5 Time(s)
   paul/none from 190.136.179.10: 5 Time(s)
   paul/none from 212.184.201.141: 2 Time(s)
   paul/none from 41.190.132.26: 2 Time(s)
   paul/none from 62.172.208.14: 5 Time(s)
   paul/none from 88.79.143.68: 5 Time(s)
   paula/keyboard-interactive/pam from 200.51.93.29: 2 Time(s)
   paula/keyboard-interactive/pam from 58.223.238.5: 2 Time(s)
   paula/none from 200.51.93.29: 2 Time(s)
   paula/none from 58.223.238.5: 2 Time(s)
   paulina/keyboard-interactive/pam from 190.41.137.64: 2 Time(s)
   paulina/none from 190.41.137.64: 2 Time(s)
   pavel/keyboard-interactive/pam from 202.185.77.110: 2 Time(s)
   pavel/keyboard-interactive/pam from 81.221.15.164: 5 Time(s)
   pavel/none from 202.185.77.110: 2 Time(s)
   pavel/none from 81.221.15.164: 5 Time(s)
   pawel/keyboard-interactive/pam from 69.169.168.200: 5 Time(s)
   pawel/keyboard-interactive/pam from 83.12.180.210: 2 Time(s)
   pawel/none from 69.169.168.200: 5 Time(s)
   pawel/none from 83.12.180.210: 2 Time(s)
   payroll/keyboard-interactive/pam from 83.13.126.74: 2 Time(s)
   payroll/none from 83.13.126.74: 2 Time(s)
   pc/keyboard-interactive/pam from 75.97.94.202: 2 Time(s)
   pc/none from 75.97.94.202: 2 Time(s)
   pc02/keyboard-interactive/pam from 211.143.79.86: 2 Time(s)
   pc02/none from 211.143.79.86: 2 Time(s)
   pc10/keyboard-interactive/pam from 200.30.74.98: 2 Time(s)
   pc10/none from 200.30.74.98: 2 Time(s)
   pc2/keyboard-interactive/pam from 88.152.67.31: 2 Time(s)
   pc2/none from 88.152.67.31: 2 Time(s)
   pc3/keyboard-interactive/pam from 200.57.32.47: 2 Time(s)
   pc3/none from 200.57.32.47: 2 Time(s)
   pc4/keyboard-interactive/pam from 190.144.116.85: 2 Time(s)
   pc4/none from 190.144.116.85: 2 Time(s)
   pcguest/keyboard-interactive/pam from 221.236.6.198: 2 Time(s)
   pcguest/none from 221.236.6.198: 2 Time(s)
   pdx/keyboard-interactive/pam from 80.53.126.4: 2 Time(s)
   pdx/none from 80.53.126.4: 2 Time(s)
   pe/keyboard-interactive/pam from 81.210.113.66: 5 Time(s)
   pe/none from 81.210.113.66: 5 Time(s)
   pedro/keyboard-interactive/pam from 213.132.73.140: 5 Time(s)
   pedro/keyboard-interactive/pam from 217.126.40.225: 5 Time(s)
   pedro/keyboard-interactive/pam from 62.141.33.184: 5 Time(s)
   pedro/none from 213.132.73.140: 5 Time(s)
   pedro/none from 217.126.40.225: 5 Time(s)
   pedro/none from 62.141.33.184: 5 Time(s)
   pepe/keyboard-interactive/pam from 141.158.240.37: 5 Time(s)
   pepe/keyboard-interactive/pam from 88.247.110.61: 5 Time(s)
   pepe/none from 141.158.240.37: 5 Time(s)
   pepe/none from 88.247.110.61: 5 Time(s)
   pereira/keyboard-interactive/pam from 62.28.111.213: 5 Time(s)
   pereira/none from 62.28.111.213: 5 Time(s)
   person/keyboard-interactive/pam from 79.187.3.138: 5 Time(s)
   person/none from 79.187.3.138: 5 Time(s)
   peterson/keyboard-interactive/pam from 165.138.79.139: 5 Time(s)
   peterson/none from 165.138.79.139: 5 Time(s)
   petra/keyboard-interactive/pam from 83.17.119.26: 5 Time(s)
   petra/none from 83.17.119.26: 5 Time(s)
   pgsql/keyboard-interactive/pam from 12.2.202.132: 5 Time(s)
   pgsql/keyboard-interactive/pam from 217.133.80.15: 5 Time(s)
   pgsql/keyboard-interactive/pam from 222.124.178.158: 5 Time(s)
   pgsql/keyboard-interactive/pam from 222.68.197.235: 1 Time(s)
   pgsql/keyboard-interactive/pam from 66.135.159.160: 4 Time(s)
   pgsql/none from 12.2.202.132: 5 Time(s)
   pgsql/none from 217.133.80.15: 5 Time(s)
   pgsql/none from 222.124.178.158: 5 Time(s)
   pgsql/none from 222.68.197.235: 1 Time(s)
   pgsql/none from 66.135.159.160: 4 Time(s)
   phil/keyboard-interactive/pam from 217.71.204.10: 5 Time(s)
   phil/none from 217.71.204.10: 5 Time(s)
   phone/keyboard-interactive/pam from 190.41.166.173: 5 Time(s)
   phone/none from 190.41.166.173: 5 Time(s)
   photo/keyboard-interactive/pam from 58.223.237.3: 5 Time(s)
   photo/keyboard-interactive/pam from 83.172.20.149: 5 Time(s)
   photo/none from 58.223.237.3: 5 Time(s)
   photo/none from 83.172.20.149: 5 Time(s)
   photos/keyboard-interactive/pam from 80.118.132.91: 5 Time(s)
   photos/none from 80.118.132.91: 5 Time(s)
   php/keyboard-interactive/pam from 148.243.156.138: 1 Time(s)
   php/none from 148.243.156.138: 1 Time(s)
   phpmyadmin/keyboard-interactive/pam from 200.196.50.26: 1 Time(s)
   phpmyadmin/none from 200.196.50.26: 1 Time(s)
   picture/keyboard-interactive/pam from 150.214.103.193: 1 Time(s)
   picture/none from 150.214.103.193: 1 Time(s)
   piero/keyboard-interactive/pam from 58.223.238.6: 1 Time(s)
   piero/none from 58.223.238.6: 1 Time(s)
   pierre/keyboard-interactive/pam from 190.39.165.193: 1 Time(s)
   pierre/none from 190.39.165.193: 1 Time(s)
   ping/keyboard-interactive/pam from 82.66.127.131: 1 Time(s)
   ping/none from 82.66.127.131: 1 Time(s)
   pio/keyboard-interactive/pam from 88.158.154.162: 1 Time(s)
   pio/none from 88.158.154.162: 1 Time(s)
   pioneer/keyboard-interactive/pam from 221.202.69.134: 1 Time(s)
   pioneer/none from 221.202.69.134: 1 Time(s)
   piotr/keyboard-interactive/pam from 125.88.99.41: 3 Time(s)
   piotr/keyboard-interactive/pam from 213.4.34.168: 1 Time(s)
   piotr/none from 125.88.99.41: 3 Time(s)
   piotr/none from 213.4.34.168: 1 Time(s)
   piotrek/keyboard-interactive/pam from 12.236.69.2: 1 Time(s)
   piotrek/keyboard-interactive/pam from 80.234.33.214: 5 Time(s)
   piotrek/keyboard-interactive/pam from 91.150.139.56: 5 Time(s)
   piotrek/none from 12.236.69.2: 1 Time(s)
   piotrek/none from 80.234.33.214: 5 Time(s)
   piotrek/none from 91.150.139.56: 5 Time(s)
   pippo/keyboard-interactive/pam from 67.19.19.210: 1 Time(s)
   pippo/none from 67.19.19.210: 1 Time(s)
   pixel/keyboard-interactive/pam from 217.133.94.17: 1 Time(s)
   pixel/none from 217.133.94.17: 1 Time(s)
   plan/keyboard-interactive/pam from 77.21.222.213: 1 Time(s)
   plan/none from 77.21.222.213: 1 Time(s)
   platinum/keyboard-interactive/pam from 201.89.83.200: 5 Time(s)
   platinum/none from 201.89.83.200: 5 Time(s)
   player/keyboard-interactive/pam from 195.72.210.188: 5 Time(s)
   player/none from 195.72.210.188: 5 Time(s)
   pm/keyboard-interactive/pam from 190.26.91.246: 4 Time(s)
   pm/none from 190.26.91.246: 4 Time(s)
   po/keyboard-interactive/pam from 87.213.38.98: 4 Time(s)
   po/none from 87.213.38.98: 4 Time(s)
   portal/keyboard-interactive/pam from 114.247.18.9: 3 Time(s)
   portal/keyboard-interactive/pam from 217.7.215.123: 2 Time(s)
   portal/none from 114.247.18.9: 3 Time(s)
   portal/none from 217.7.215.123: 2 Time(s)
   pos/keyboard-interactive/pam from 80.152.174.204: 5 Time(s)
   pos/keyboard-interactive/pam from 87.105.212.210: 5 Time(s)
   pos/none from 80.152.174.204: 5 Time(s)
   pos/none from 87.105.212.210: 5 Time(s)
   postfix/keyboard-interactive/pam from 61.29.122.37: 1 Time(s)
   postfix/none from 61.29.122.37: 1 Time(s)
   postgrey/keyboard-interactive/pam from 216.244.157.116: 5 Time(s)
   postgrey/keyboard-interactive/pam from 80.93.124.2: 5 Time(s)
   postgrey/none from 216.244.157.116: 5 Time(s)
   postgrey/none from 80.93.124.2: 5 Time(s)
   postmaster/keyboard-interactive/pam from 213.83.63.110: 5 Time(s)
   postmaster/keyboard-interactive/pam from 94.26.30.145: 5 Time(s)
   postmaster/none from 213.83.63.110: 5 Time(s)
   postmaster/none from 94.26.30.145: 5 Time(s)
   test/none from 121.14.118.4: 1 Time(s)
   test/password from 121.14.118.4: 1 Time(s)

Error in PAM authentication:
   Authentication failure for news from 115.168.70.179 : 5 Time(s)
   Authentication failure for news from 188.7.broadband7.iol.cz : 5 Time(s)
   Authentication failure for news from 189-039-012-020.static.spo.ctbc.com.br : 5 Time(s)
   Authentication failure for news from geatsun1.upct.es : 1 Time(s)
   Authentication failure for news from uu142.internetdsl.tpnet.pl : 5 Time(s)
   Authentication failure for nobody from 190.182.10.100 : 5 Time(s)
   Authentication failure for nobody from 202.103.52.146 : 3 Time(s)
   Authentication failure for nobody from 211.138.224.180 : 5 Time(s)
   Authentication failure for nobody from 57.129.broadband3.iol.cz : 5 Time(s)
   Authentication failure for nobody from dubserver.globalcafe.ie : 3 Time(s)
   Authentication failure for nobody from kreta136.myserver.t-online.de : 3 Time(s)
   Authentication failure for nobody from sa9.enterprisewizard.com : 3 Time(s)
   Authentication failure for nobody from server71114.xantronnet.de : 3 Time(s)
   Authentication failure for operator from 189-55-185-57-nd.cpe.vivax.com.br : 5 Time(s)
   Authentication failure for operator from 189.51.143.37 : 5 Time(s)
   Authentication failure for operator from 94.143.192.243 : 5 Time(s)
   Authentication failure for operator from ip-89-102-33-174.karneval.cz : 5 Time(s)
   Authentication failure for operator from laubervilliers-153-52-15-39.w217-128.abo.wanadoo.fr : 5 Time(s)
   Authentication failure for operator from mail.specserve.com : 5 Time(s)
   Authentication failure for operator from pd95b0fdc.dip0.t-ipconnect.de : 5 Time(s)
   Authentication failure for postgres from 195-23-46-202.static.net.novis.pt : 5 Time(s)
   Authentication failure for postgres from 212.0.127.98 : 1 Time(s)
   Authentication failure for postgres from 218.95.254.134 : 5 Time(s)
   Authentication failure for postgres from 60.209.234.238 : 5 Time(s)
   Authentication failure for postgres from 62-99-198-61.fuggerstrasse.xdsl-line.inode.at : 5 Time(s)
   Authentication failure for postgres from 69.169.174.12.provo.static.broadweavenetworks.net : 5 Time(s)
   Authentication failure for postgres from 72.252.2.246 : 5 Time(s)
   Authentication failure for postgres from 80.78.182.13 : 4 Time(s)
   Authentication failure for postgres from 83-64-19-250.volume.xdsl-line.inode.at : 5 Time(s)
   Authentication failure for postgres from 83-64-58-66.work.xdsl-line.inode.at : 5 Time(s)
   Authentication failure for postgres from 87.235.219.57 : 6 Time(s)
   Authentication failure for postgres from adsl-99-18-164-69.dsl.hstntx.sbcglobal.net : 5 Time(s)
   Authentication failure for postgres from c-67-169-75-27.hsd1.ca.comcast.net : 5 Time(s)
   Authentication failure for postgres from endeavour.cityshop.com.br : 5 Time(s)
   Authentication failure for postgres from host218-239-static.15-79-b.business.telecomitalia.it : 5 Time(s)
   Authentication failure for postgres from ip-53-226.sn1.eutelia.it : 5 Time(s)
   Authentication failure for postgres from mail.darek.com.pl : 5 Time(s)
   Authentication failure for postgres from pd907d77b.dip0.t-ipconnect.de : 5 Time(s)
   Authentication failure for postgres from s15331410.onlinehome-server.info : 5 Time(s)
   Authentication failure for postgres from vostokmv.ru : 1 Time(s)
   User not known to the underlying authentication module for illegal user neal from 122.166.101.134 : 4 Time(s)
   User not known to the underlying authentication module for illegal user neil from 86.105.177.4 : 4 Time(s)
   User not known to the underlying authentication module for illegal user newuser from accmx.aim-cc.com : 5 Time(s)
   User not known to the underlying authentication module for illegal user newuser from zeus.cz.insideidc.com : 5 Time(s)
   User not known to the underlying authentication module for illegal user nic from 62.87.236.225 : 5 Time(s)
   User not known to the underlying authentication module for illegal user nic from modemcable038.177-70-69.static.videotron.ca : 5 Time(s)
   User not known to the underlying authentication module for illegal user nick from chello212186105014.11.vie.surfer.at : 5 Time(s)
   User not known to the underlying authentication module for illegal user nick from lvps87-230-17-244.dedicated.hosteurope.de : 5 Time(s)
   User not known to the underlying authentication module for illegal user nico from 61.145.71.200 : 5 Time(s)
   User not known to the underlying authentication module for illegal user nico from 89.223.97.100 : 5 Time(s)
   User not known to the underlying authentication module for illegal user nicolas from 77.229.4.226 : 5 Time(s)
   User not known to the underlying authentication module for illegal user nicole from p5098aecc.dip0.t-ipconnect.de : 5 Time(s)
   User not known to the underlying authentication module for illegal user nicole from port-87-193-191-148.static.qsc.de : 5 Time(s)
   User not known to the underlying authentication module for illegal user night from bard.com.ua : 3 Time(s)
   User not known to the underlying authentication module for illegal user nikki from 209.85.66.241 : 3 Time(s)
   User not known to the underlying authentication module for illegal user niklas from 88.151.76.10 : 3 Time(s)
   User not known to the underlying authentication module for illegal user niko from host-148-032.consiagnet.it : 3 Time(s)
   User not known to the underlying authentication module for illegal user niko from mail2.fortalezainmuebles.com : 3 Time(s)
   User not known to the underlying authentication module for illegal user nilson from 94.143.192.243 : 3 Time(s)
   User not known to the underlying authentication module for illegal user nina from ip-174-142-116-10.static.privatedns.com : 3 Time(s)
   User not known to the underlying authentication module for illegal user nml from 201-24-133-98.gnace300.ipd.brasiltelecom.net.br : 3 Time(s)
   User not known to the underlying authentication module for illegal user nms from 141-220-124-91.pool.ukrtel.net : 3 Time(s)
   User not known to the underlying authentication module for illegal user nnn from osipov.sscc.ru : 3 Time(s)
   User not known to the underlying authentication module for illegal user noc from 190.144.55.163 : 5 Time(s)
   User not known to the underlying authentication module for illegal user noc from hlava.com : 5 Time(s)
   User not known to the underlying authentication module for illegal user noel from 200.123.183.90 : 5 Time(s)
   User not known to the underlying authentication module for illegal user nono from 113.100.130.34 : 5 Time(s)
   User not known to the underlying authentication module for illegal user nora from 201.47.232.58.static.gvt.net.br : 5 Time(s)
   User not known to the underlying authentication module for illegal user norbert from jxeelab.iasi.rdsnet.ro : 5 Time(s)
   User not known to the underlying authentication module for illegal user nori from 87-194-149-56.bethere.co.uk : 5 Time(s)
   User not known to the underlying authentication module for illegal user norma from bicomix.bicomix.hu : 3 Time(s)
   User not known to the underlying authentication module for illegal user notes from 31.red-80-59-124.staticip.rima-tde.net : 3 Time(s)
   User not known to the underlying authentication module for illegal user notes from 90.182.107.194 : 3 Time(s)
   User not known to the underlying authentication module for illegal user ns from 200.55.214.219 : 3 Time(s)
   User not known to the underlying authentication module for illegal user ntcadmin from www.stecolflex.ro : 3 Time(s)
   User not known to the underlying authentication module for illegal user ntop from 62.153.136.122 : 3 Time(s)
   User not known to the underlying authentication module for illegal user nuri from pyrobatyst.svit.gtsi.sk : 3 Time(s)
   User not known to the underlying authentication module for illegal user nurse from s01060016b6199523.cg.shawcable.net : 3 Time(s)
   User not known to the underlying authentication module for illegal user nuucp from adsl-71-140-125-154.dsl.sndg02.pacbell.net : 3 Time(s)
   User not known to the underlying authentication module for illegal user ocs from 193.124.218.3 : 2 Time(s)
   User not known to the underlying authentication module for illegal user ocs from 193.124.218.6 : 1 Time(s)
   User not known to the underlying authentication module for illegal user office from 161.24.254.102 : 1 Time(s)
   User not known to the underlying authentication module for illegal user office from 189-19-58-95.dsl.telesp.net.br : 4 Time(s)
   User not known to the underlying authentication module for illegal user office from 190.68.117.90 : 4 Time(s)
   User not known to the underlying authentication module for illegal user office from 201.232.54.168 : 4 Time(s)
   User not known to the underlying authentication module for illegal user office1 from aurora.anum.tuwien.ac.at : 4 Time(s)
   User not known to the underlying authentication module for illegal user office2 from c-76-17-182-127.hsd1.mn.comcast.net : 3 Time(s)
   User not known to the underlying authentication module for illegal user oikawa from 62.153.136.122 : 4 Time(s)
   User not known to the underlying authentication module for illegal user oksana from 81.210.113.66 : 5 Time(s)
   User not known to the underlying authentication module for illegal user ola from 200.178.96.20 : 5 Time(s)
   User not known to the underlying authentication module for illegal user oleg from 64.202.240.124 : 4 Time(s)
   User not known to the underlying authentication module for illegal user op from 203.197.128.205 : 1 Time(s)
   User not known to the underlying authentication module for illegal user open from hsi-kbw-217-008-061-146.hsi.kabelbw.de : 1 Time(s)
   User not known to the underlying authentication module for illegal user openbsd from 115.168.77.219 : 1 Time(s)
   User not known to the underlying authentication module for illegal user openvpn from 218.201.73.38 : 1 Time(s)
   User not known to the underlying authentication module for illegal user oper from 211.142.187.90 : 5 Time(s)
   User not known to the underlying authentication module for illegal user oper from ac251.internetdsl.tpnet.pl : 5 Time(s)
   User not known to the underlying authentication module for illegal user operador from 121.241.248.8 : 5 Time(s)
   User not known to the underlying authentication module for illegal user operador from 220.95.207.25 : 5 Time(s)
   User not known to the underlying authentication module for illegal user operator1 from mail.beco.com.ve : 5 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 116.124.178.120 : 3 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 118.142.17.34 : 3 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 164.77.246.170 : 5 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 173-14-43-193-michigan.hfc.comcastbusiness.net : 3 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 173-25-145-135.client.mchsi.com : 5 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 187.20.122.215 : 3 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 200-150-176-218.static-corp.ajato.com.br : 3 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 200.159.111.6 : 5 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 209.85.66.240 : 3 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 211.99.218.2 : 5 Time(s)
   User not known to the underlying authentication module for illegal user oracle from 230.23.202.62.fix.bluewin.ch : 5 Time(s)
   User not known to the underlying authentication module for illegal user oracle from hmv90.internetdsl.tpnet.pl : 5 Time(s)
   User not known to the underlying authentication module for illegal user oracle from laubervilliers-153-52-15-39.w217-128.abo.wanadoo.fr : 4 Time(s)
   User not known to the underlying authentication module for illegal user oracle from mail.opaloperu.com : 3 Time(s)
   User not known to the underlying authentication module for illegal user orders from 169.red-217-126-153.staticip.rima-tde.net : 3 Time(s)
   User not known to the underlying authentication module for illegal user os from server1.p7hosting.de : 3 Time(s)
   User not known to the underlying authentication module for illegal user oscar from ip-137-225.sn2.eutelia.it : 3 Time(s)
   User not known to the underlying authentication module for illegal user oscar from ip-88-152-67-31.unitymediagroup.de : 3 Time(s)
   User not known to the underlying authentication module for illegal user oskar from ip72-211-253-15.oc.oc.cox.net : 5 Time(s)
   User not known to the underlying authentication module for illegal user otrs from fxip-00364.externet.hu : 5 Time(s)
   User not known to the underlying authentication module for illegal user p01 from 89.223.99.190 : 5 Time(s)
   User not known to the underlying authentication module for illegal user p2p from 85-124-35-179.static.xdsl-line.inode.at : 5 Time(s)
   User not known to the underlying authentication module for illegal user p3scan from 140.125.90.217 : 3 Time(s)
   User not known to the underlying authentication module for illegal user pablo from projectus.com.br : 5 Time(s)
   User not known to the underlying authentication module for illegal user paco from 60-248-161-181.hinet-ip.hinet.net : 5 Time(s)
   User not known to the underlying authentication module for illegal user pah from 201.82.193.8 : 3 Time(s)
   User not known to the underlying authentication module for illegal user pai from ns.swnet.info : 3 Time(s)
   User not known to the underlying authentication module for illegal user pam from srvmail.paredescano.com : 3 Time(s)
   User not known to the underlying authentication module for illegal user pan from 200.175.156.174.static.gvt.net.br : 1 Time(s)
   User not known to the underlying authentication module for illegal user panasonic from 113.100.130.39 : 3 Time(s)
   User not known to the underlying authentication module for illegal user panda from 218.207.69.167 : 3 Time(s)
   User not known to the underlying authentication module for illegal user pao from 213.169.56.45 : 3 Time(s)
   User not known to the underlying authentication module for illegal user paola from a.mx.smilesaude.com.br : 3 Time(s)
   User not known to the underlying authentication module for illegal user paolo from 190.144.55.164 : 3 Time(s)
   User not known to the underlying authentication module for illegal user paper from 189.77.95.205 : 3 Time(s)
   User not known to the underlying authentication module for illegal user parent from 200.178.139.2 : 5 Time(s)
   User not known to the underlying authentication module for illegal user park from 222.68.200.52 : 5 Time(s)
   User not known to the underlying authentication module for illegal user partimag from 209.85.66.240 : 5 Time(s)
   User not known to the underlying authentication module for illegal user partners from 209.85.66.238 : 3 Time(s)
   User not known to the underlying authentication module for illegal user pascal from static-87-79-237-78.netcologne.de : 3 Time(s)
   User not known to the underlying authentication module for illegal user pastor from c-67-169-75-27.hsd1.ca.comcast.net : 3 Time(s)
   User not known to the underlying authentication module for illegal user pat from 217-159-148-74-dsl.est.estpak.ee : 3 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 195-23-46-202.static.net.novis.pt : 3 Time(s)
   User not known to the underlying authentication module for illegal user patricia from 83-64-232-194.baumgarten.xdsl-line.inode.at : 5 Time(s)
   User not known to the underlying authentication module for illegal user patrick from 190.146.155.141 : 5 Time(s)
   User not known to the underlying authentication module for illegal user patrick from a.mx.smilesaude.com.br : 5 Time(s)
   User not known to the underlying authentication module for illegal user paul from 190.136.179.10 : 5 Time(s)
   User not known to the underlying authentication module for illegal user paul from 212.184.201.141 : 2 Time(s)
   User not known to the underlying authentication module for illegal user paul from 62.172.208.14 : 5 Time(s)
   User not known to the underlying authentication module for illegal user paul from dialbs-088-079-143-068.static.arcor-ip.net : 5 Time(s)
   User not known to the underlying authentication module for illegal user paul from mail.dawda.co.ug : 2 Time(s)
   User not known to the underlying authentication module for illegal user paula from 200.51.93.29 : 2 Time(s)
   User not known to the underlying authentication module for illegal user paula from 58.223.238.5 : 2 Time(s)
   User not known to the underlying authentication module for illegal user paulina from 190.41.137.64 : 2 Time(s)
   User not known to the underlying authentication module for illegal user pavel from 202.185.77.110 : 2 Time(s)
   User not known to the underlying authentication module for illegal user pavel from zux221-015-164.adsl.green.ch : 5 Time(s)
   User not known to the underlying authentication module for illegal user pawel from 69.169.168.200.provo.static.broadweavenetworks.net : 5 Time(s)
   User not known to the underlying authentication module for illegal user pawel from ggy210.internetdsl.tpnet.pl : 2 Time(s)
   User not known to the underlying authentication module for illegal user payroll from mail.darek.com.pl : 2 Time(s)
   User not known to the underlying authentication module for illegal user pc from 75.97.94.202.res-cmts.senj.ptd.net : 2 Time(s)
   User not known to the underlying authentication module for illegal user pc02 from 211.143.79.86 : 2 Time(s)
   User not known to the underlying authentication module for illegal user pc10 from mail.credirebaja.com : 2 Time(s)
   User not known to the underlying authentication module for illegal user pc2 from ip-88-152-67-31.unitymediagroup.de : 2 Time(s)
   User not known to the underlying authentication module for illegal user pc3 from 200.57.32.47 : 2 Time(s)
   User not known to the underlying authentication module for illegal user pc4 from 190.144.116.85 : 2 Time(s)
   User not known to the underlying authentication module for illegal user pcguest from 221.236.6.198 : 2 Time(s)
   User not known to the underlying authentication module for illegal user pdx from iw4.internetdsl.tpnet.pl : 2 Time(s)
   User not known to the underlying authentication module for illegal user pe from 81.210.113.66 : 5 Time(s)
   User not known to the underlying authentication module for illegal user pedro from 225.red-217-126-40.staticip.rima-tde.net : 5 Time(s)
   User not known to the underlying authentication module for illegal user pedro from aufwaerts-verlag.de : 5 Time(s)
   User not known to the underlying authentication module for illegal user pedro from mail.gns.su : 5 Time(s)
   User not known to the underlying authentication module for illegal user pepe from 88.247.110.61 : 5 Time(s)
   User not known to the underlying authentication module for illegal user pepe from pool-141-158-240-37.phil.east.verizon.net : 5 Time(s)
   User not known to the underlying authentication module for illegal user pereira from 62.28.111.213 : 5 Time(s)
   User not known to the underlying authentication module for illegal user person from had138.internetdsl.tpnet.pl : 5 Time(s)
   User not known to the underlying authentication module for illegal user peterson from 165.138.79.139 : 5 Time(s)
   User not known to the underlying authentication module for illegal user petra from aol26.internetdsl.tpnet.pl : 5 Time(s)
   User not known to the underlying authentication module for illegal user pgsql from 12.2.202.132 : 5 Time(s)
   User not known to the underlying authentication module for illegal user pgsql from 222.124.178.158 : 5 Time(s)
   User not known to the underlying authentication module for illegal user pgsql from 222.68.197.235 : 1 Time(s)
   User not known to the underlying authentication module for illegal user pgsql from ip160.theneptune.sea.ygnition.net : 4 Time(s)
   User not known to the underlying authentication module for illegal user pgsql from static-217-133-80-15.clienti.tiscali.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user phil from 217.71.204.10 : 5 Time(s)
   User not known to the underlying authentication module for illegal user phone from 190.41.166.173 : 5 Time(s)
   User not known to the underlying authentication module for illegal user photo from 58.223.237.3 : 5 Time(s)
   User not known to the underlying authentication module for illegal user photo from 83.172.20.149 : 5 Time(s)
   User not known to the underlying authentication module for illegal user photos from 80.118.132.91 : 5 Time(s)
   User not known to the underlying authentication module for illegal user php from 148.243.156.138 : 1 Time(s)
   User not known to the underlying authentication module for illegal user phpmyadmin from mvx-200-196-50-26.mundivox.com : 1 Time(s)
   User not known to the underlying authentication module for illegal user picture from schumann.ugr.es : 1 Time(s)
   User not known to the underlying authentication module for illegal user piero from 58.223.238.6 : 1 Time(s)
   User not known to the underlying authentication module for illegal user pierre from 190.39.165.193 : 1 Time(s)
   User not known to the underlying authentication module for illegal user ping from minbari.wipgames.com : 1 Time(s)
   User not known to the underlying authentication module for illegal user pio from 88-158-154-162.asconet.ro : 1 Time(s)
   User not known to the underlying authentication module for illegal user pioneer from 221.202.69.134 : 1 Time(s)
   User not known to the underlying authentication module for illegal user piotr from 125.88.99.41 : 3 Time(s)
   User not known to the underlying authentication module for illegal user piotr from 168.red-213-4-34.staticip.rima-tde.net : 1 Time(s)
   User not known to the underlying authentication module for illegal user piotrek from 80.234.33.214 : 5 Time(s)
   User not known to the underlying authentication module for illegal user piotrek from 91.150.139.56 : 5 Time(s)
   User not known to the underlying authentication module for illegal user piotrek from does.summitoh.net : 1 Time(s)
   User not known to the underlying authentication module for illegal user pippo from mail.direitonovo.com.br : 1 Time(s)
   User not known to the underlying authentication module for illegal user pixel from static-217-133-94-17.clienti.tiscali.it : 1 Time(s)
   User not known to the underlying authentication module for illegal user plan from 77-21-222-213-dynip.superkabel.de : 1 Time(s)
   User not known to the underlying authentication module for illegal user platinum from 201.89.83.200 : 5 Time(s)
   User not known to the underlying authentication module for illegal user player from 195-72-210-188-static.intercom.it : 5 Time(s)
   User not known to the underlying authentication module for illegal user pm from 190.26.91.246 : 4 Time(s)
   User not known to the underlying authentication module for illegal user po from 87.213.38.98 : 4 Time(s)
   User not known to the underlying authentication module for illegal user portal from 114.247.18.9 : 3 Time(s)
   User not known to the underlying authentication module for illegal user portal from pd907d77b.dip0.t-ipconnect.de : 2 Time(s)
   User not known to the underlying authentication module for illegal user pos from p5098aecc.dip0.t-ipconnect.de : 5 Time(s)
   User not known to the underlying authentication module for illegal user pos from static-87-105-212-210.ssp.dialog.net.pl : 5 Time(s)
   User not known to the underlying authentication module for illegal user postfix from 61.29.122.37 : 1 Time(s)
   User not known to the underlying authentication module for illegal user postgrey from 216.244.157.116 : 5 Time(s)
   User not known to the underlying authentication module for illegal user postgrey from bard.com.ua : 5 Time(s)
   User not known to the underlying authentication module for illegal user postmaster from 213.83.63.110 : 5 Time(s)
   User not known to the underlying authentication module for illegal user postmaster from 94.26.30.145 : 5 Time(s)

**Unmatched Entries**
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER
error: Could not get shadow information for NOUSER

 ---------------------- SSHD End ------------------------- 


 --------------------- Syslogd Begin ------------------------ 


Syslogd started 1 Time(s)

 ---------------------- Syslogd End ------------------------- 


 --------------------- vpopmail Begin ------------------------ 


No Such User Found:
	cbird@ - 1 Time(s)
	office@ - 92 Time(s)

 ---------------------- vpopmail End ------------------------- 



------------------ Disk Space --------------------

/dev/hda3              72G   57G   12G  84% /
/dev/hda1              92M  6.3M   81M   8% /boot


 ###################### LogWatch End ######################### 



More information about the Sysadmin mailing list