################### Logwatch 7.4.0 (03/01/11) #################### Processing Initiated: Thu Aug 15 04:42:13 2019 Date Range Processed: yesterday ( 2019-Aug-14 ) Period is day. Detail Level of Output: 0 Type of Output/Format: mail / text Logfiles for Host: h2361197.stratoserver.net ################################################################## --------------------- fail2ban-messages Begin ------------------------ Banned services with Fail2Ban: Bans:Unbans ssh: [316:315] ---------------------- fail2ban-messages End ------------------------- --------------------- httpd Begin ------------------------ A total of 2 sites probed the server 172.104.242.173 180.131.19.43 Requests with error response codes 400 Bad Request /: 2 Time(s) null: 2 Time(s) /monitor/op5/nacoma/command_test.php?cmd_str=wget: 1 Time(s) /repository/annotate?rev=wget: 1 Time(s) 7: 1 Time(s) \xF7X\x16)jZ\x19\x00\xFB\xD4\xA9\x96\x8B\x ... x00\x00\x0E\xC0: 1 Time(s) http://110.249.212.46/testget?q=23333&port=443: 1 Time(s) http://110.249.212.46/testget?q=23333&port=80: 1 Time(s) mstshash=Administr: 1 Time(s) 404 Not Found /robots.txt: 31 Time(s) /berlin/apple-touch-icon.png: 8 Time(s) /wp-login.php: 4 Time(s) /reader/2016_sose_konstanz_lang.pdf: 1 Time(s) /resolutionen/sose18/reso_ablaeufe_akkr.pdf: 1 Time(s) /resolutionen/sose18/reso_laender_akkr.pdf: 1 Time(s) /resolutionen/wise17/Akkreditierung_PosPap/Pospap_: 1 Time(s) /sites/default/files/Lehramtstellungnahme.pdf: 1 Time(s) /sites/default/files/Positionspapier_WiSe1 ... s_Studieren.pdf: 1 Time(s) /wp-xmla.php: 1 Time(s) 499 (undefined) /reader/1983-so-Clausthal-Zellerfeld_So83.pdf: 1 Time(s) 500 Internal Server Error /robots.txt: 59 Time(s) /: 45 Time(s) ---------------------- httpd End ------------------------- --------------------- pam_unix Begin ------------------------ sshd: Authentication Failures: unknown (106.12.85.172): 70 Time(s) unknown (103.31.82.122): 67 Time(s) unknown (11379-02.root.nessus.at): 62 Time(s) unknown (212.87.9.155): 62 Time(s) unknown (catv-78-139-18-16.catv.broadband.hu): 59 Time(s) unknown (modemcable218.12-73-45.static.videotron.ca): 58 Time(s) unknown (139.59.69.76): 57 Time(s) unknown (159.65.239.104): 57 Time(s) unknown (s01062c303348c09f.vf.shawcable.net): 56 Time(s) unknown (118.67.219.101): 55 Time(s) unknown (128.199.138.31): 55 Time(s) unknown (192.144.173.84): 55 Time(s) unknown (61-216-145-48.hinet-ip.hinet.net): 55 Time(s) unknown (ns328430.ip-37-187-113.eu): 55 Time(s) unknown (218.56.61.103): 54 Time(s) unknown (223.27.234.253): 54 Time(s) unknown (58.47.177.158): 54 Time(s) unknown (maq01.crcrj.org.br): 54 Time(s) unknown (165.22.158.129): 53 Time(s) unknown (182.61.170.251): 53 Time(s) unknown (62.234.73.104): 53 Time(s) unknown (82.166.93.77): 53 Time(s) unknown (157.230.163.6): 52 Time(s) unknown (net-31-27-38-242.cust.vodafonedsl.it): 52 Time(s) unknown (142.93.26.245): 51 Time(s) unknown (101.ip-149-56-44.net): 50 Time(s) unknown (159.65.123.104): 50 Time(s) unknown (5.249.144.206): 50 Time(s) unknown (106.75.91.43): 49 Time(s) unknown (112.196.54.35): 49 Time(s) unknown (200.55.198.147): 49 Time(s) unknown (104.236.224.69): 48 Time(s) unknown (222.29.98.176): 48 Time(s) unknown (128.ip-51-254-129.eu): 47 Time(s) unknown (139.199.213.105): 47 Time(s) unknown (162.243.165.39): 47 Time(s) unknown (190.191.116.170): 47 Time(s) unknown (111.231.201.103): 46 Time(s) unknown (159.89.10.77): 45 Time(s) unknown (233.16.93.34.bc.googleusercontent.com): 45 Time(s) unknown (28.179.247.35.bc.googleusercontent.com): 45 Time(s) unknown (103.248.25.171): 44 Time(s) unknown (106.52.24.64): 44 Time(s) unknown (179.215.174.85): 44 Time(s) unknown (ns559310.ip-54-39-51.net): 44 Time(s) unknown (118.24.44.129): 42 Time(s) unknown (138.197.162.32): 41 Time(s) unknown (129.213.153.229): 40 Time(s) unknown (206.189.30.229): 40 Time(s) unknown (65.ip-51-255-162.eu): 40 Time(s) unknown (ns3037689.ip-37-59-54.eu): 40 Time(s) unknown (chat.assefaz.org.br): 35 Time(s) unknown (106.51.77.214): 32 Time(s) unknown (14.41.77.225): 30 Time(s) unknown (222.79.44.225): 30 Time(s) unknown (139.199.164.21): 27 Time(s) unknown (169.255.59.92): 27 Time(s) unknown (178.128.242.233): 27 Time(s) unknown (139.199.62.214): 25 Time(s) unknown (111.230.248.125): 24 Time(s) unknown (103.103.181.19): 23 Time(s) unknown (162-197-47-156.lightspeed.snantx.sbcglobal.net): 23 Time(s) unknown (165.22.249.42): 23 Time(s) unknown (109.116.41.170): 21 Time(s) unknown (157.230.248.65): 20 Time(s) unknown (199.174.199.104.bc.googleusercontent.com): 20 Time(s) unknown (59.63.208.191): 20 Time(s) unknown (92.ip-51-75-204.eu): 20 Time(s) unknown (193-80-166-174.adsl.highway.telekom.at): 19 Time(s) unknown (134.209.21.83): 18 Time(s) unknown (200.122.249.203): 17 Time(s) unknown (213.ip-51-83-40.eu): 17 Time(s) unknown (182.61.46.191): 16 Time(s) unknown (140.143.195.91): 15 Time(s) unknown (139.255.89.98): 14 Time(s) root (106.12.85.172): 12 Time(s) root (118.24.44.129): 10 Time(s) root (ns328430.ip-37-187-113.eu): 10 Time(s) root (61-216-145-48.hinet-ip.hinet.net): 9 Time(s) unknown (190.228.21.74): 9 Time(s) root (104.236.224.69): 8 Time(s) root (128.ip-51-254-129.eu): 8 Time(s) root (142.93.26.245): 8 Time(s) root (82.166.93.77): 8 Time(s) root (128.199.138.31): 7 Time(s) root (190.191.116.170): 7 Time(s) root (212.87.9.155): 7 Time(s) root (223.27.234.253): 7 Time(s) root (5.249.144.206): 7 Time(s) unknown (211.159.152.252): 7 Time(s) unknown (58.200.120.95): 7 Time(s) root (103.31.82.122): 6 Time(s) root (112.196.54.35): 6 Time(s) root (157.230.163.6): 6 Time(s) root (159.65.123.104): 6 Time(s) root (159.65.239.104): 6 Time(s) root (162.243.165.39): 6 Time(s) root (165.22.158.129): 6 Time(s) root (199.174.199.104.bc.googleusercontent.com): 6 Time(s) root (201.179.248.44): 6 Time(s) root (218.236.64.245): 6 Time(s) root (218.92.0.193): 6 Time(s) root (222.29.98.176): 6 Time(s) root (86.57.211.69): 6 Time(s) root (ns3037689.ip-37-59-54.eu): 6 Time(s) root (ns559310.ip-54-39-51.net): 6 Time(s) root (s01062c303348c09f.vf.shawcable.net): 6 Time(s) unknown (219.149.225.154): 6 Time(s) unknown (95.58.194.141): 6 Time(s) unknown (bl7-40-120.dsl.telepac.pt): 6 Time(s) root (103.248.25.171): 5 Time(s) root (106.51.77.214): 5 Time(s) root (138.197.162.32): 5 Time(s) root (139.199.213.105): 5 Time(s) root (139.199.62.214): 5 Time(s) root (139.59.69.76): 5 Time(s) root (182.61.170.251): 5 Time(s) root (58.47.177.158): 5 Time(s) root (65.ip-51-255-162.eu): 5 Time(s) root (maq01.crcrj.org.br): 5 Time(s) root (modemcable218.12-73-45.static.videotron.ca): 5 Time(s) unknown (142.197.22.33): 5 Time(s) unknown (59.90.9.248): 5 Time(s) unknown (77.81.234.139): 5 Time(s) root (111.231.201.103): 4 Time(s) root (129.213.153.229): 4 Time(s) root (139.199.164.21): 4 Time(s) root (165.22.249.42): 4 Time(s) root (179.215.174.85): 4 Time(s) root (206.189.30.229): 4 Time(s) root (213.ip-51-83-40.eu): 4 Time(s) root (218.56.61.103): 4 Time(s) root (catv-78-139-18-16.catv.broadband.hu): 4 Time(s) root (net-31-27-38-242.cust.vodafonedsl.it): 4 Time(s) unknown (093105160227.elblag.vectranet.pl): 4 Time(s) unknown (128.199.87.57): 4 Time(s) unknown (167.99.13.45): 4 Time(s) unknown (180.168.36.86): 4 Time(s) unknown (180.250.205.114): 4 Time(s) unknown (200.60.91.42): 4 Time(s) unknown (218.153.159.198): 4 Time(s) unknown (220.92.16.94): 4 Time(s) unknown (45.55.242.26): 4 Time(s) unknown (61.85.40.112): 4 Time(s) postgres (103.31.82.122): 3 Time(s) root (103.103.181.19): 3 Time(s) root (11379-02.root.nessus.at): 3 Time(s) root (118.67.219.101): 3 Time(s) root (134.209.21.83): 3 Time(s) root (222.79.44.225): 3 Time(s) root (28.179.247.35.bc.googleusercontent.com): 3 Time(s) unknown (112.164.48.84): 3 Time(s) unknown (141.89.215.133): 3 Time(s) unknown (193.32.163.182): 3 Time(s) unknown (36.66.69.33): 3 Time(s) unknown (40.112.248.127): 3 Time(s) unknown (fp276fdfc7.stmb203.ap.nuro.jp): 3 Time(s) unknown (pool-71-105-202-254.nycmny.fios.verizon.net): 3 Time(s) unknown (tor-exit1-readme.dfri.se): 3 Time(s) postgres (28.179.247.35.bc.googleusercontent.com): 2 Time(s) postgres (58.47.177.158): 2 Time(s) root (101.ip-149-56-44.net): 2 Time(s) root (109.116.41.170): 2 Time(s) root (159.89.10.77): 2 Time(s) root (192.144.173.84): 2 Time(s) root (193-80-166-174.adsl.highway.telekom.at): 2 Time(s) root (200.122.249.203): 2 Time(s) root (200.55.198.147): 2 Time(s) root (233.16.93.34.bc.googleusercontent.com): 2 Time(s) root (36.66.69.33): 2 Time(s) root (chat.assefaz.org.br): 2 Time(s) root (ool-8e366592.static.optonline.net): 2 Time(s) unknown (119.196.83.26): 2 Time(s) unknown (142.93.213.144): 2 Time(s) unknown (159.89.163.235): 2 Time(s) unknown (183.103.35.198): 2 Time(s) unknown (185.110.127.26): 2 Time(s) unknown (221.156.116.51): 2 Time(s) unknown (62.234.122.199): 2 Time(s) unknown (c-71-193-198-31.hsd1.or.comcast.net): 2 Time(s) unknown (valereplantevin.ca): 2 Time(s) backup (106.52.24.64): 1 Time(s) backup (106.75.91.43): 1 Time(s) backup (233.16.93.34.bc.googleusercontent.com): 1 Time(s) bin (129.213.153.229): 1 Time(s) bin (14.41.77.225): 1 Time(s) bind (206.189.30.229): 1 Time(s) daemon (190.191.116.170): 1 Time(s) daemon (233.16.93.34.bc.googleusercontent.com): 1 Time(s) games (11379-02.root.nessus.at): 1 Time(s) games (65.ip-51-255-162.eu): 1 Time(s) games (82.166.93.77): 1 Time(s) irc (165.22.249.42): 1 Time(s) irc (28.179.247.35.bc.googleusercontent.com): 1 Time(s) jan (112.196.54.35): 1 Time(s) list (58.47.177.158): 1 Time(s) lp (159.65.239.104): 1 Time(s) lp (165.22.249.42): 1 Time(s) mail (111.230.248.125): 1 Time(s) mail (catv-78-139-18-16.catv.broadband.hu): 1 Time(s) mail (ns559310.ip-54-39-51.net): 1 Time(s) mailman (103.103.181.19): 1 Time(s) mailman (179.215.174.85): 1 Time(s) mailman (222.29.98.176): 1 Time(s) mysql (103.31.82.122): 1 Time(s) mysql (106.12.85.172): 1 Time(s) mysql (111.230.248.125): 1 Time(s) mysql (112.196.54.35): 1 Time(s) mysql (139.199.213.105): 1 Time(s) mysql (14.41.77.225): 1 Time(s) mysql (141.89.215.133): 1 Time(s) mysql (151.emeraldonion.org): 1 Time(s) mysql (159.65.239.104): 1 Time(s) mysql (178.128.195.6): 1 Time(s) mysql (190.191.116.170): 1 Time(s) mysql (82.166.93.77): 1 Time(s) news (59.63.208.191): 1 Time(s) nobody (106.75.91.43): 1 Time(s) nobody (5.249.144.206): 1 Time(s) openproject (138.197.162.32): 1 Time(s) postfix (111.231.201.103): 1 Time(s) postgres (106.12.85.172): 1 Time(s) postgres (118.67.219.101): 1 Time(s) postgres (139.199.164.21): 1 Time(s) postgres (140.143.195.91): 1 Time(s) postgres (142.93.26.245): 1 Time(s) postgres (157.230.163.6): 1 Time(s) postgres (159.65.123.104): 1 Time(s) postgres (162.243.165.39): 1 Time(s) postgres (165.22.158.129): 1 Time(s) postgres (182.61.170.251): 1 Time(s) postgres (183.103.35.198): 1 Time(s) postgres (190.191.116.170): 1 Time(s) postgres (192.144.173.84): 1 Time(s) postgres (212.87.9.155): 1 Time(s) postgres (221.156.116.51): 1 Time(s) postgres (223.27.234.253): 1 Time(s) postgres (92.ip-51-75-204.eu): 1 Time(s) postgres (catv-78-139-18-16.catv.broadband.hu): 1 Time(s) postgres (net-31-27-38-242.cust.vodafonedsl.it): 1 Time(s) proxy (223.27.234.253): 1 Time(s) root (106.52.24.64): 1 Time(s) root (107.172.3.124): 1 Time(s) root (112.164.48.84): 1 Time(s) root (119.196.83.30): 1 Time(s) root (121.160.198.198): 1 Time(s) root (128.14.136.158): 1 Time(s) root (129.211.83.206): 1 Time(s) root (139.255.89.98): 1 Time(s) root (139.59.14.210): 1 Time(s) root (140.143.195.91): 1 Time(s) root (142.93.212.131): 1 Time(s) root (142.93.213.144): 1 Time(s) root (169.255.59.92): 1 Time(s) root (178.128.242.233): 1 Time(s) root (182.61.46.191): 1 Time(s) root (185.248.160.231): 1 Time(s) root (190.228.21.74): 1 Time(s) root (2.153.184.166.dyn.user.ono.com): 1 Time(s) root (211.159.152.252): 1 Time(s) root (218.92.0.158): 1 Time(s) root (218.92.0.184): 1 Time(s) root (46.101.1.198): 1 Time(s) root (49.88.112.55): 1 Time(s) root (59.90.9.248): 1 Time(s) root (77.81.234.139): 1 Time(s) root (valereplantevin.ca): 1 Time(s) root (vm595813.vps.masterhost.ru): 1 Time(s) sshd (159.emeraldonion.org): 1 Time(s) sync (103.248.25.171): 1 Time(s) sync (139.255.89.98): 1 Time(s) sync (58.47.177.158): 1 Time(s) temp (179.215.174.85): 1 Time(s) unknown (109.194.174.78): 1 Time(s) unknown (113.140.48.156): 1 Time(s) unknown (118.25.7.83): 1 Time(s) unknown (119.196.83.30): 1 Time(s) unknown (123.133.78.91): 1 Time(s) unknown (123.20.248.145): 1 Time(s) unknown (128.14.136.158): 1 Time(s) unknown (132.232.131.30): 1 Time(s) unknown (139.59.59.187): 1 Time(s) unknown (140.246.191.130): 1 Time(s) unknown (151.emeraldonion.org): 1 Time(s) unknown (154.70.200.107): 1 Time(s) unknown (159.emeraldonion.org): 1 Time(s) unknown (165.227.97.108): 1 Time(s) unknown (175.211.116.230): 1 Time(s) unknown (185.195.237.117): 1 Time(s) unknown (185.220.101.29): 1 Time(s) unknown (185.220.101.65): 1 Time(s) unknown (188.131.200.191): 1 Time(s) unknown (188.166.216.84): 1 Time(s) unknown (193.112.74.137): 1 Time(s) unknown (196.43.172.28): 1 Time(s) unknown (197.55.22.147): 1 Time(s) unknown (36.89.209.22): 1 Time(s) unknown (36.99.41.137): 1 Time(s) unknown (68.183.105.52): 1 Time(s) unknown (89.36.222.85): 1 Time(s) unknown (92.63.194.26): 1 Time(s) unknown (ool-8e366592.static.optonline.net): 1 Time(s) unknown (v157-7-197-105.myvps.jp): 1 Time(s) uucp (109.194.174.78): 1 Time(s) uucp (129.213.153.229): 1 Time(s) uucp (182.61.170.251): 1 Time(s) www-data (118.24.44.129): 1 Time(s) www-data (182.61.170.251): 1 Time(s) www-data (213.ip-51-83-40.eu): 1 Time(s) www-data (233.16.93.34.bc.googleusercontent.com): 1 Time(s) www-data (fp276fdfc7.stmb203.ap.nuro.jp): 1 Time(s) Invalid Users: Unknown Account: 3298 Time(s) ---------------------- pam_unix End ------------------------- --------------------- Postfix Begin ------------------------ 4 Miscellaneous warnings 38.533K Bytes accepted 39,458 38.533K Bytes sent via SMTP 39,458 ======== ================================================== 1 Accepted 100.00% -------- -------------------------------------------------- 1 Total 100.00% ======== ================================================== 2 4xx Reject relay denied 100.00% -------- -------------------------------------------------- 2 Total 4xx Rejects 100.00% ======== ================================================== 298 Connections 18 Connections lost (inbound) 298 Disconnections 1 Removed from queue 1 Sent via SMTP 3 SMTP dialog errors 1 Hostname verification errors (FCRDNS) ---------------------- Postfix End ------------------------- --------------------- sendmail-largeboxes (large mail spool files) Begin ------------------------ Large Mailbox threshold: 40MB (41943040 bytes) Warning: Large mailbox: mailman.gz (1747199807) Warning: Large mailbox: mailman (235703599967) ---------------------- sendmail-largeboxes (large mail spool files) End ------------------------- --------------------- SSHD Begin ------------------------ Disconnecting after too many authentication failures for user: root : 4 Time(s) Failed logins from: 2.153.184.166 (2.153.184.166.dyn.user.ono.com): 1 time 5.249.144.206 (host206-144-249-5.static.serverdedicati.aruba.it): 8 times 14.41.77.225: 2 times 23.129.64.151 (151.emeraldonion.org): 1 time 23.129.64.159 (159.emeraldonion.org): 1 time 31.27.38.242 (net-31-27-38-242.cust.vodafonedsl.it): 5 times 34.93.16.233 (233.16.93.34.bc.googleusercontent.com): 5 times 35.247.179.28 (28.179.247.35.bc.googleusercontent.com): 6 times 36.66.69.33: 2 times 37.59.54.90 (ns3037689.ip-37-59-54.eu): 6 times 37.187.113.229 (ns328430.ip-37-187-113.eu): 10 times 39.111.223.199 (fp276fdfc7.stmb203.ap.nuro.jp): 1 time 45.73.12.218 (modemcable218.12-73-45.static.videotron.ca): 5 times 46.101.1.198: 1 time 49.88.112.55: 3 times 51.75.204.92 (92.ip-51-75-204.eu): 1 time 51.83.40.213 (213.ip-51-83-40.eu): 5 times 51.254.129.128 (128.ip-51-254-129.eu): 8 times 51.255.162.65 (65.ip-51-255-162.eu): 6 times 54.39.51.31 (ns559310.ip-54-39-51.net): 7 times 58.47.177.158: 9 times 59.63.208.191: 1 time 59.90.9.248: 1 time 61.216.145.48 (61-216-145-48.HINET-IP.hinet.net): 9 times 77.81.234.139 (host139-234-81-77.serverdedicati.aruba.it): 1 time 78.139.18.16 (catv-78-139-18-16.catv.broadband.hu): 6 times 82.166.93.77 (82-166-93-77.barak-online.net): 10 times 86.57.211.69: 6 times 90.156.152.63 (vm595813.vps.masterhost.ru): 1 time 96.48.244.48 (S01062c303348c09f.vf.shawcable.net): 6 times 103.31.82.122: 10 times 103.103.181.19: 4 times 103.248.25.171: 6 times 104.199.174.199 (199.174.199.104.bc.googleusercontent.com): 6 times 104.236.224.69: 8 times 106.12.85.172: 14 times 106.51.77.214 (broadband.actcorp.in): 5 times 106.52.24.64: 2 times 106.75.91.43: 2 times 107.172.3.124 (107-172-3-124-host.colocrossing.com): 1 time 109.116.41.170: 2 times 109.194.174.78 (109x194x174x78.dynamic.tmn.ertelecom.ru): 1 time 111.230.248.125: 2 times 111.231.201.103: 5 times 112.164.48.84: 1 time 112.196.54.35: 8 times 118.24.44.129: 11 times 118.67.219.101: 4 times 119.196.83.30: 1 time 121.160.198.198: 1 time 128.14.136.158: 4 times 128.199.138.31 (staging.fiuzu.com): 7 times 129.211.83.206: 1 time 129.213.153.229: 6 times 134.209.21.83: 3 times 138.197.162.32 (247labs.com): 6 times 139.59.14.210: 1 time 139.59.69.76: 5 times 139.199.62.214: 5 times 139.199.164.21: 5 times 139.199.213.105: 6 times 139.255.89.98 (ln-static-139-255-89-98.link.net.id): 2 times 140.143.195.91: 2 times 141.89.215.133: 1 time 142.54.101.146 (ool-8e366592.static.optonline.net): 2 times 142.93.26.245: 9 times 142.93.212.131: 1 time 142.93.213.144: 1 time 149.56.44.101 (101.ip-149-56-44.net): 2 times 157.230.163.6: 7 times 159.65.123.104: 7 times 159.65.239.104: 8 times 159.89.10.77: 2 times 162.243.165.39: 7 times 165.22.158.129 (preserva.com): 7 times 165.22.249.42: 6 times 169.255.59.92 (nnngo.org): 1 time 177.69.118.197 (chat.assefaz.org.br): 2 times 178.128.195.6: 1 time 178.128.242.233: 1 time 179.215.174.85 (b3d7ae55.virtua.com.br): 6 times 182.61.46.191: 1 time 182.61.170.251: 8 times 183.103.35.198: 1 time 185.248.160.231: 1 time 190.191.116.170 (170-116-191-190.cab.prima.net.ar): 10 times 190.228.21.74 (smtp.iese.edu.ar): 1 time 192.144.173.84: 3 times 193.80.166.174 (193-80-166-174.adsl.highway.telekom.at): 2 times 198.27.81.223 (valereplantevin.ca): 1 time 200.55.198.147 (corrreo.puertomontt.cl): 2 times 200.122.249.203 (static-dedicado-200-122-249-203.une.net.co): 2 times 201.76.178.51 (maq01.crcrj.org.br): 5 times 201.179.248.44 (201-179-248-44.speedy.com.ar): 6 times 206.189.30.229: 5 times 211.159.152.252: 1 time 212.87.9.155: 8 times 212.232.25.224 (11379-02.root.nessus.at): 4 times 218.56.61.103: 4 times 218.92.0.158: 4 times 218.92.0.184: 3 times 218.92.0.193: 6 times 218.236.64.245: 6 times 221.156.116.51: 1 time 222.29.98.176: 7 times 222.79.44.225 (225.44.79.222.broad.fz.fj.dynamic.163data.com.cn): 3 times 223.27.234.253: 9 times Illegal users from: undef: 2304 times 5.249.144.206 (host206-144-249-5.static.serverdedicati.aruba.it): 50 times 14.41.77.225: 30 times 23.129.64.151 (151.emeraldonion.org): 1 time 23.129.64.159 (159.emeraldonion.org): 1 time 31.27.38.242 (net-31-27-38-242.cust.vodafonedsl.it): 52 times 34.93.16.233 (233.16.93.34.bc.googleusercontent.com): 45 times 35.247.179.28 (28.179.247.35.bc.googleusercontent.com): 45 times 36.66.69.33: 3 times 36.89.209.22: 1 time 36.99.41.137: 1 time 37.59.54.90 (ns3037689.ip-37-59-54.eu): 40 times 37.187.113.229 (ns328430.ip-37-187-113.eu): 55 times 39.111.223.199 (fp276fdfc7.stmb203.ap.nuro.jp): 3 times 40.112.248.127: 3 times 45.55.242.26: 4 times 45.73.12.218 (modemcable218.12-73-45.static.videotron.ca): 58 times 51.75.204.92 (92.ip-51-75-204.eu): 20 times 51.83.40.213 (213.ip-51-83-40.eu): 17 times 51.254.129.128 (128.ip-51-254-129.eu): 47 times 51.255.162.65 (65.ip-51-255-162.eu): 40 times 54.39.51.31 (ns559310.ip-54-39-51.net): 44 times 58.47.177.158: 54 times 58.200.120.95: 7 times 59.63.208.191: 20 times 59.90.9.248: 5 times 61.85.40.112: 4 times 61.216.145.48 (61-216-145-48.HINET-IP.hinet.net): 55 times 62.234.73.104: 53 times 62.234.122.199: 2 times 68.183.105.52: 1 time 71.105.202.254 (pool-71-105-202-254.nycmny.fios.verizon.net): 3 times 71.193.198.31 (c-71-193-198-31.hsd1.or.comcast.net): 2 times 77.81.234.139 (host139-234-81-77.serverdedicati.aruba.it): 5 times 78.139.18.16 (catv-78-139-18-16.catv.broadband.hu): 59 times 82.166.93.77 (82-166-93-77.barak-online.net): 53 times 85.240.40.120 (bl7-40-120.dsl.telepac.pt): 6 times 89.36.222.85 (host85-222-36-89.serverdedicati.aruba.it): 1 time 92.63.194.26: 1 time 93.105.160.227 (093105160227.elblag.vectranet.pl): 4 times 95.58.194.141 (95.58.194.141.megaline.telecom.kz): 6 times 96.48.244.48 (S01062c303348c09f.vf.shawcable.net): 56 times 103.31.82.122: 67 times 103.103.181.19: 23 times 103.248.25.171: 44 times 104.199.174.199 (199.174.199.104.bc.googleusercontent.com): 20 times 104.236.224.69: 48 times 106.12.85.172: 70 times 106.51.77.214 (broadband.actcorp.in): 32 times 106.52.24.64: 44 times 106.75.91.43: 49 times 109.116.41.170: 21 times 109.194.174.78 (109x194x174x78.dynamic.tmn.ertelecom.ru): 1 time 111.230.248.125: 24 times 111.231.201.103: 46 times 112.164.48.84: 3 times 112.196.54.35: 49 times 113.140.48.156: 1 time 118.24.44.129: 42 times 118.25.7.83: 1 time 118.67.219.101: 55 times 119.196.83.26: 2 times 119.196.83.30: 1 time 123.20.248.145: 1 time 123.133.78.91: 1 time 128.14.136.158: 1 time 128.199.87.57: 4 times 128.199.138.31 (staging.fiuzu.com): 55 times 129.213.153.229: 40 times 132.232.131.30: 1 time 134.209.21.83: 18 times 138.197.162.32 (247labs.com): 41 times 139.59.59.187: 1 time 139.59.69.76: 57 times 139.162.122.110 (scan-8.security.ipip.net): 2 times 139.199.62.214: 25 times 139.199.164.21: 27 times 139.199.213.105: 47 times 139.255.89.98 (ln-static-139-255-89-98.link.net.id): 14 times 140.143.195.91: 15 times 140.246.191.130: 1 time 141.89.215.133: 3 times 142.54.101.146 (ool-8e366592.static.optonline.net): 1 time 142.93.26.245: 51 times 142.93.213.144: 2 times 142.197.22.33 (142-197-22-33.res.bhn.net): 5 times 149.56.44.101 (101.ip-149-56-44.net): 50 times 154.70.200.107: 1 time 157.7.197.105 (v157-7-197-105.myvps.jp): 1 time 157.230.163.6: 52 times 157.230.248.65: 20 times 159.65.123.104: 50 times 159.65.239.104: 57 times 159.89.10.77: 45 times 159.89.163.235: 2 times 162.197.47.156 (162-197-47-156.lightspeed.snantx.sbcglobal.net): 23 times 162.243.165.39: 47 times 165.22.158.129 (preserva.com): 53 times 165.22.249.42: 23 times 165.227.97.108: 1 time 167.99.13.45: 4 times 169.255.59.92 (nnngo.org): 27 times 171.25.193.77 (tor-exit1-readme.dfri.se): 3 times 175.211.116.230: 1 time 177.69.118.197 (chat.assefaz.org.br): 35 times 178.128.242.233: 27 times 179.215.174.85 (b3d7ae55.virtua.com.br): 44 times 180.168.36.86: 4 times 180.250.205.114: 4 times 182.61.46.191: 16 times 182.61.170.251: 53 times 183.103.35.198: 2 times 185.110.127.26 (not-assigned-ac10e41a.ruhnet.org): 2 times 185.195.237.117: 1 time 185.220.101.29: 1 time 185.220.101.65: 1 time 188.131.200.191: 1 time 188.166.216.84: 1 time 190.191.116.170 (170-116-191-190.cab.prima.net.ar): 47 times 190.228.21.74 (smtp.iese.edu.ar): 9 times 192.144.173.84: 55 times 193.32.163.182 (hosting-by.cloud-home.me): 3 times 193.80.166.174 (193-80-166-174.adsl.highway.telekom.at): 19 times 193.112.74.137: 1 time 196.43.172.28: 1 time 197.55.22.147 (host-197.55.22.147.tedata.net): 1 time 198.27.81.223 (valereplantevin.ca): 2 times 200.55.198.147 (corrreo.puertomontt.cl): 49 times 200.60.91.42: 4 times 200.122.249.203 (static-dedicado-200-122-249-203.une.net.co): 17 times 201.76.178.51 (maq01.crcrj.org.br): 54 times 206.189.30.229: 40 times 211.159.152.252: 7 times 212.87.9.155: 62 times 212.232.25.224 (11379-02.root.nessus.at): 62 times 218.56.61.103: 54 times 218.153.159.198: 4 times 219.149.225.154: 6 times 220.92.16.94: 4 times 221.156.116.51: 2 times 222.29.98.176: 48 times 222.79.44.225 (225.44.79.222.broad.fz.fj.dynamic.163data.com.cn): 30 times 223.27.234.253: 54 times **Unmatched Entries** Disconnecting: Change of username or service not allowed: (adi,ssh-connection) -> (oracle,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (user,ssh-connection) -> (user1,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (admin,ssh-connection) -> (user,ssh-connection) [preauth] : 2 time(s) Disconnecting: Change of username or service not allowed: (user1,ssh-connection) -> (sshd,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (sshd,ssh-connection) -> (sshd1,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (oracle,ssh-connection) -> (root,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (mysql,ssh-connection) -> (test,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (ftp,ssh-connection) -> (user,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (test,ssh-connection) -> (guest,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (root,ssh-connection) -> (ftp,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (sshd1,ssh-connection) -> (mysql,ssh-connection) [preauth] : 1 time(s) Disconnecting: Change of username or service not allowed: (guest,ssh-connection) -> (adi,ssh-connection) [preauth] : 1 time(s) ---------------------- SSHD End ------------------------- --------------------- Disk Space Begin ------------------------ Filesystem Size Used Avail Use% Mounted on /dev/vzfs 400G 242G 159G 61% / ---------------------- Disk Space End ------------------------- ###################### Logwatch End #########################