Sep 2 02:51:01 refused connect from 61.174.49.108 (61.174.49.108) Sep 2 14:26:47 input_userauth_request: invalid user tusharkumar [preauth] Sep 2 15:47:56 Invalid user from 10.70.195.22 Sep 2 22:57:32 sshd[1163]: last message repeated 2 times Sep 3 09:02:10 pam_unix(sshd:auth): check pass; user unknown Sep 3 15:47:34 Invalid user 0785998 from 10.70.239.15 Sep 4 09:05:00 refused connect from 193.107.17.72 (193.107.17.72) Sep 5 03:27:11 refused connect from 61.144.43.235 (61.144.43.235) Sep 5 15:10:54 Did not receive identification string from 205.211.50.162 Sep 6 05:53:51 refused connect from 122.225.109.208 (122.225.109.208) Sep 6 21:11:00 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(149.34.178.222.cq.cq.cta.net.cn, AF_INET) failed Sep 7 17:19:40 sudo: idallen : TTY=pts/0 ; PWD=/home/idallen ; USER=root ; COMMAND=/bin/bash Sep 8 06:28:53 refused connect from 116.10.191.180 (116.10.191.180) Sep 8 13:02:15 pam_unix(sshd:auth): check pass; user unknown Sep 8 14:16:14 gnome-keyring-daemon[20479]: couldn't create new login credential: (unknown) Sep 8 17:34:45 sudo: pam_unix(sudo:auth): conversation failed Sep 8 22:44:51 reverse mapping checking getaddrinfo for 14-169.alianzaviva.net [200.46.169.14] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 9 09:09:10 su[3268]: + /dev/pts/14 cst8207a:idallen Sep 9 14:32:16 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.70.203.185 Sep 9 18:22:58 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.109.216 user=root Sep 10 09:23:00 gnome-keyring-daemon[20569]: create_credential: assertion `GCK_IS_SESSION (session)' failed Sep 10 15:30:18 refused connect from 122.225.109.105 (122.225.109.105) Sep 11 10:31:34 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.109.110 user=root Sep 11 15:39:17 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(207.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Sep 12 09:48:57 input_userauth_request: invalid user admin [preauth] Sep 12 12:17:54 gnome-keyring-daemon[18256]: module_instances: assertion `module' failed Sep 12 17:39:21 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(207.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Sep 14 08:03:04 Connection closed by 175.126.125.99 [preauth] Sep 15 05:30:43 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(207.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Sep 15 12:21:58 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.70.172.192 Sep 15 14:03:05 pam_unix(sshd:auth): check pass; user unknown Sep 16 04:57:12 pam_unix(sshd:auth): check pass; user unknown Sep 16 09:16:36 gnome-keyring-daemon[30017]: egg_error_message: assertion `error' failed Sep 16 14:05:47 gnome-keyring-daemon[22149]: couldn't find secret store module: (unknown) Sep 17 07:54:47 PAM 1 more authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.211.50.163 Sep 17 11:33:27 Connection closed by 205.211.50.163 [preauth] Sep 18 06:51:50 Disconnecting: Too many authentication failures for root [preauth] Sep 18 15:38:01 reverse mapping checking getaddrinfo for 194.136.178.61.dail.by.gs.dynamic.163data.com.cn [61.178.136.194] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 19 10:11:59 gnome-keyring-daemon[10435]: egg_error_message: assertion `error' failed Sep 19 14:38:05 gnome-keyring-daemon[1960]: couldn't create new login credential: (unknown) Sep 19 20:41:59 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(72-53-83-194.cpe.distributel.net, AF_INET) failed Sep 20 16:29:52 gnome-keyring-daemon[20365]: create_credential: assertion `GCK_IS_SESSION (session)' failed Sep 21 15:14:38 Connection closed by 144.0.0.42 [preauth] Sep 22 12:02:52 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(hal.ottawa.ad.algonquincollege.com, AF_INET) failed Sep 22 12:11:22 refused connect from 211.143.243.35 (211.143.243.35) Sep 22 16:06:55 input_userauth_request: invalid user luce001 [preauth] Sep 23 07:48:38 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.255.174.28 Sep 23 16:31:56 warning: /etc/hosts.allow, line 15: host name/address mismatch: 10.100.9.179 != pc.ottawa.ad.algonquincollege.com Sep 24 09:04:28 gnome-keyring-daemon[25092]: module_instances: assertion `module' failed Sep 24 14:45:01 Connection closed by 205.211.50.163 [preauth] Sep 25 13:25:06 Invalid user adhikari from 10.70.187.79 Sep 25 20:35:31 reverse mapping checking getaddrinfo for 92b91fe2.rdns.100tb.com [146.185.31.226] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 26 12:08:56 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(184-75-215-206.amanah.com, AF_INET) failed Sep 26 22:57:13 Connection closed by 209.195.103.6 [preauth] Sep 27 18:33:03 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(dsl-64-56-252-159.tor.primus.ca, AF_INET) failed Sep 28 15:44:29 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=70.50.51.80 Sep 28 22:57:20 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(184-175-11-178.dsl.teksavvy.com, AF_INET) failed Sep 29 10:54:40 input_userauth_request: invalid user ~idallen [preauth] Sep 29 17:01:49 Disconnecting: Too many authentication failures for root [preauth] Sep 30 04:11:02 refused connect from 220.177.198.39 (220.177.198.39) Sep 30 22:04:15 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.34.25 user=root Oct 1 11:01:45 Did not receive identification string from 10.70.188.0 Oct 2 10:16:02 reverse mapping checking getaddrinfo for 244.50.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.50.244] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 3 01:09:02 refused connect from 61.174.51.235 (61.174.51.235) Oct 3 11:55:37 reverse mapping checking getaddrinfo for 72-53-81-73.cpe.distributel.net [72.53.81.73] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 3 19:54:33 refused connect from 117.21.173.35 (117.21.173.35) Oct 4 08:55:14 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.109.119 user=root Oct 5 16:42:29 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(226.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Oct 6 01:06:09 refused connect from 122.225.109.210 (122.225.109.210) Oct 6 16:53:04 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(235.50.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Oct 7 05:40:25 Disconnecting: Too many authentication failures for root [preauth] Oct 7 08:52:36 refused connect from 61.174.50.163 (61.174.50.163) Oct 8 09:58:58 PAM 1 more authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.70.186.113 Oct 9 00:14:00 refused connect from 193.107.16.206 (193.107.16.206) Oct 9 15:41:42 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.177.198.27 user=root Oct 9 23:34:26 refused connect from u16534395.onlinehome-server.com (198.71.58.200) Oct 10 18:01:39 reverse mapping checking getaddrinfo for 72-53-81-73.cpe.distributel.net [72.53.81.73] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 10 23:10:54 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(ppp-216-106-103-205.storm.ca, AF_INET) failed Oct 11 12:14:04 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(67-210-162.253.static.tel-ott.com, AF_INET) failed Oct 11 20:23:05 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(225.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Oct 12 08:22:11 refused connect from 122.225.97.66 (122.225.97.66) Oct 13 03:13:19 refused connect from 122.225.97.106 (122.225.97.106) Oct 14 03:26:40 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.97.74 user=root Oct 14 15:41:07 Invalid user developer from 91.232.140.79 Oct 15 09:31:04 reverse mapping checking getaddrinfo for mx6.fund123.cn [122.225.97.103] failed - POSSIBLE BREAK-IN ATTEMPT! Oct 15 20:09:24 Disconnecting: Too many authentication failures for root [preauth] Oct 16 05:41:24 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.97.77 user=root Oct 16 17:29:31 fatal: Read from socket failed: Connection reset by peer [preauth] Oct 17 13:23:43 Disconnecting: Too many authentication failures for kar0020 [preauth] Oct 18 05:32:33 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Oct 18 05:35:41 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Oct 18 12:40:47 Invalid user a from 66.154.119.145 Oct 19 06:41:54 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.109.112 user=root Oct 19 13:50:50 refused connect from 111.74.239.197 (111.74.239.197) Oct 19 21:43:35 PAM 1 more authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=host-23-251-184-193.dyn.295.ca Oct 20 11:42:37 Disconnecting: Too many authentication failures for [preauth] Oct 21 08:41:10 sshd[21370]: last message repeated 2 times Oct 21 09:03:56 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Oct 21 09:34:13 Disconnecting: Too many authentication failures for root [preauth] Oct 21 10:01:21 Disconnecting: Too many authentication failures for root [preauth] Oct 21 10:29:40 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Oct 21 10:58:30 sshd[32517]: last message repeated 2 times Oct 21 17:15:35 pam_unix(sshd:auth): check pass; user unknown Oct 21 23:45:29 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(245.50.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Oct 22 12:39:28 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Oct 23 00:14:56 refused connect from 122.225.97.97 (122.225.97.97) Oct 23 17:01:05 refused connect from 222.186.58.146 (222.186.58.146) Oct 24 14:31:55 refused connect from 222.186.56.41 (222.186.56.41) Oct 25 00:25:40 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.97.100 user=root Oct 25 15:50:38 refused connect from 222.186.34.243 (222.186.34.243) Oct 26 05:54:47 sshd[24900]: last message repeated 2 times Oct 27 00:29:17 refused connect from 61.174.51.210 (61.174.51.210) Oct 27 11:56:26 input_userauth_request: invalid user [preauth] Oct 27 18:29:49 Address 166.48.30.165 maps to 166-48-30-165.cable.yesup.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 28 12:03:30 Invalid user humm001 from 99.224.117.127 Oct 29 00:19:21 refused connect from 218.2.0.135 (218.2.0.135) Oct 29 18:06:16 refused connect from 217.197.240.110 (217.197.240.110) Oct 30 12:57:37 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.97.104 user=root Oct 31 11:53:29 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-50-16-43-134.compute-1.amazonaws.com user=root Nov 1 19:05:41 refused connect from 222.186.56.45 (222.186.56.45) Nov 2 10:45:50 Disconnecting: Too many authentication failures for root [preauth] Nov 3 10:14:07 refused connect from 192.126.120.89 (192.126.120.89) Nov 4 12:10:12 refused connect from 202.109.143.111 (202.109.143.111) Nov 5 04:17:11 sshd[22074]: last message repeated 2 times Nov 5 17:57:50 Invalid user admin from 193.104.41.55 Nov 6 06:13:49 refused connect from 222.186.56.44 (222.186.56.44) Nov 6 13:30:03 refused connect from 122.225.97.118 (122.225.97.118) Nov 7 03:20:08 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69-64-73-194.dedicated.abac.net user=root Nov 7 21:41:34 pam_unix(sshd:auth): check pass; user unknown Nov 8 17:45:40 refused connect from 122.225.109.194 (122.225.109.194) Nov 9 03:04:36 refused connect from 115.230.127.174 (115.230.127.174) Nov 9 13:23:12 Disconnecting: Too many authentication failures for root [preauth] Nov 10 00:41:06 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.170 user=root Nov 10 12:03:14 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.97.87 user=root Nov 11 00:37:59 Disconnecting: Too many authentication failures for root [preauth] Nov 11 15:28:53 refused connect from 31.184.193.231 (31.184.193.231) Nov 12 11:13:16 Connection closed by 206.251.61.70 [preauth] Nov 12 23:47:57 reverse mapping checking getaddrinfo for 192-161-81-90.rdns.cloudradium.com [192.161.81.90] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 13 17:43:40 pam_unix(sshd:auth): check pass; user unknown Nov 14 10:00:29 reverse mapping checking getaddrinfo for thor.ottawa.ad.algonquincollege.com [10.50.5.33] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 15 03:37:47 Disconnecting: Too many authentication failures for root [preauth] Nov 16 00:26:54 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.46.188 user=root Nov 17 07:13:40 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.147.103.142 user=root Nov 17 14:14:48 Connection closed by 10.70.168.120 [preauth] Nov 18 01:33:57 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(huzhou.ctc.mx.fund123.cn, AF_INET) failed Nov 18 18:14:50 refused connect from 122.225.109.120 (122.225.109.120) Nov 19 13:14:09 fatal: Read from socket failed: Connection reset by peer [preauth] Nov 19 22:26:08 refused connect from 144.0.0.25 (144.0.0.25) Nov 20 15:02:39 su[21042]: pam_authenticate: Authentication failure Nov 21 14:58:55 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.41.124.49 user=root Nov 22 04:14:16 refused connect from 144.0.0.11 (144.0.0.11) Nov 22 04:17:24 refused connect from 144.0.0.11 (144.0.0.11) Nov 22 14:22:36 reverse mapping checking getaddrinfo for haocheng-pc.ottawa.ad.algonquincollege.com [10.50.20.153] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 23 12:56:34 refused connect from 122.225.109.217 (122.225.109.217) Nov 23 21:22:20 refused connect from 198.99.28.229 (198.99.28.229) Nov 24 05:08:59 refused connect from 122.225.97.114 (122.225.97.114) Nov 24 16:31:45 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(209-195-103-6.cpe.distributel.net, AF_INET) failed Nov 25 01:29:38 refused connect from 220.177.198.45 (220.177.198.45) Nov 25 05:20:23 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(163.4.161.222.adsl-pool.jlccptt.net.cn, AF_INET) failed Nov 25 10:00:21 reverse mapping checking getaddrinfo for archangel.ottawa.ad.algonquincollege.com [10.49.9.145] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 26 00:44:42 refused connect from 220.177.198.45 (220.177.198.45) Nov 26 19:12:16 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.41.124.59 user=root Nov 27 03:30:05 refused connect from 122.225.109.196 (122.225.109.196) Nov 27 09:50:16 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-172-143.rev.poneytelecom.eu user=root Nov 27 21:38:03 Connection closed by 128.134.54.242 [preauth] Nov 28 07:22:51 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.109.35.104 Nov 28 13:49:05 refused connect from 144.0.0.27 (144.0.0.27) Nov 28 22:31:11 refused connect from 62-210-177-229.rev.poneytelecom.eu (62.210.177.229) Nov 29 08:03:49 refused connect from 62-210-141-194.rev.poneytelecom.eu (62.210.141.194) Nov 29 20:53:08 refused connect from 220.177.198.82 (220.177.198.82) Nov 30 04:54:41 refused connect from 122.225.109.203 (122.225.109.203) Nov 30 17:46:21 reverse mapping checking getaddrinfo for 209.50.174.61.dial.wz.zj.dynamic.163data.com.cn [61.174.50.209] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 1 07:57:28 Invalid user admin from 54.93.174.60 Dec 1 18:42:02 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.70.206.123 user=root Dec 1 23:44:22 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(149.4.161.222.adsl-pool.jlccptt.net.cn, AF_INET) failed Dec 1 23:45:55 refused connect from 222.161.4.149 (222.161.4.149) Dec 1 23:47:45 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(149.4.161.222.adsl-pool.jlccptt.net.cn, AF_INET) failed Dec 1 23:49:38 refused connect from 222.161.4.149 (222.161.4.149) Dec 1 23:51:33 refused connect from 222.161.4.149 (222.161.4.149) Dec 2 07:43:31 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(224.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Dec 2 16:17:35 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.109.125 user=root Dec 3 00:39:30 fatal: Read from socket failed: Connection reset by peer [preauth] Dec 3 12:47:20 Disconnecting: Too many authentication failures for root [preauth] Dec 4 06:53:57 refused connect from 103.41.124.21 (103.41.124.21) Dec 4 09:27:23 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 10:10:06 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 10:49:55 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 11:28:40 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 12:10:05 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 12:48:15 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 13:24:32 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 14:01:56 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 14:36:48 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 4 19:16:47 reverse mapping checking getaddrinfo for jordy-laptop.ottawa.ad.algonquincollege.com [10.100.9.77] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 5 04:34:43 warning: /etc/hosts.allow, line 15: host name/name mismatch: mus-nature.ca != mail1.myblakes.ca Dec 5 16:14:29 input_userauth_request: invalid user admin [preauth] Dec 5 20:46:42 Address 206.132.178.110 maps to dialdyn110.travel-net.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 6 06:52:52 sshd[958]: last message repeated 2 times Dec 6 15:59:56 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(235.50.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Dec 6 16:39:41 Disconnecting: Too many authentication failures for root [preauth] Dec 6 23:57:47 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(200.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Dec 7 02:23:20 Disconnecting: Too many authentication failures for cst8207a [preauth] Dec 7 04:45:34 sudo: idallen : TTY=pts/2 ; PWD=/home/idallen/cst8177/14f ; USER=root ; COMMAND=/bin/bash Dec 7 21:26:44 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(224.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Dec 8 00:19:58 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 01:06:24 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 02:58:40 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(249.50.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Dec 8 05:31:48 refused connect from 144.0.0.49 (144.0.0.49) Dec 8 07:51:28 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(178.50.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Dec 8 17:53:03 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 18:29:17 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 19:05:09 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 19:40:06 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 20:16:45 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 20:53:31 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 21:52:06 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 8 22:43:01 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=objenix-1.titaninternet.co.uk user=root Dec 9 00:24:13 Connection closed by 222.186.197.76 [preauth] Dec 9 02:54:15 Address 109.228.17.134 maps to carenewsletter.co.uk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 9 13:06:05 input_userauth_request: invalid user D-Link [preauth] Dec 9 13:38:00 input_userauth_request: invalid user admin [preauth] Dec 9 14:17:54 input_userauth_request: invalid user ftpuser [preauth] Dec 9 15:05:56 Connection closed by 91.135.237.52 [preauth] Dec 9 16:01:10 Invalid user admin from 23.23.172.57 Dec 9 16:41:59 input_userauth_request: invalid user ftpuser [preauth] Dec 9 17:23:26 input_userauth_request: invalid user ftpuser [preauth] Dec 9 18:45:33 Invalid user ftpuser from 221.151.112.189 Dec 9 19:27:42 input_userauth_request: invalid user admin [preauth] Dec 9 20:21:28 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 9 20:35:35 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 9 20:51:32 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 9 21:09:46 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 9 21:20:50 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 9 22:11:22 pam_unix(sshd:auth): check pass; user unknown Dec 9 23:27:24 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.38.162.39 Dec 10 00:44:48 input_userauth_request: invalid user ftpuser [preauth] Dec 10 01:45:35 input_userauth_request: invalid user ftpuser [preauth] Dec 10 02:54:44 pam_unix(sshd:auth): check pass; user unknown Dec 10 04:43:13 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.242.229.75 Dec 10 07:40:31 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.30.190.56 Dec 10 10:40:10 Invalid user webadmin from 76.74.237.19 Dec 11 06:32:59 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.235.189.244 user=root Dec 11 06:35:40 refused connect from 221.235.189.244 (221.235.189.244) Dec 11 06:38:47 refused connect from 221.235.189.244 (221.235.189.244) Dec 12 00:29:57 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(211.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Dec 12 18:39:57 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(231.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Dec 13 16:34:42 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 13 16:46:56 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 13 16:59:24 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 13 17:11:40 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.144 user=root Dec 13 17:24:05 Disconnecting: Too many authentication failures for root [preauth] Dec 13 17:36:14 sshd[23998]: last message repeated 2 times Dec 14 04:17:18 Received SIGHUP; restarting. Dec 15 09:38:10 Bad protocol version identification '\026\003\001' from 82.221.102.193 Dec 15 23:46:22 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(huzhou.ctc.mx.fund123.cn, AF_INET) failed Dec 16 15:35:54 refused connect from 122.225.103.125 (122.225.103.125) Dec 17 07:04:17 refused connect from 103.41.124.55 (103.41.124.55) Dec 17 16:28:30 refused connect from 222.161.197.13 (222.161.197.13) Dec 17 19:46:38 input_userauth_request: invalid user ubnt [preauth] Dec 18 02:36:36 Disconnecting: Too many authentication failures for root [preauth] Dec 18 02:42:56 Disconnecting: Too many authentication failures for root [preauth] Dec 18 02:49:15 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Dec 18 02:55:33 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Dec 18 03:01:38 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Dec 18 03:07:59 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Dec 18 03:14:24 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Dec 18 03:19:31 pam_unix(sshd:auth): check pass; user unknown Dec 18 03:22:33 pam_unix(sshd:auth): check pass; user unknown Dec 18 03:25:43 Invalid user postgres from 10.50.5.144 Dec 18 03:28:37 Disconnecting: Too many authentication failures for postgres [preauth] Dec 18 03:31:39 pam_unix(sshd:auth): check pass; user unknown Dec 18 03:34:45 pam_unix(sshd:auth): check pass; user unknown Dec 18 03:38:04 Invalid user postgres from 10.50.5.144 Dec 18 03:41:14 Disconnecting: Too many authentication failures for postgres [preauth] Dec 18 03:44:32 pam_unix(sshd:auth): check pass; user unknown Dec 18 03:47:41 pam_unix(sshd:auth): check pass; user unknown Dec 18 03:51:01 Invalid user postgres from 10.50.5.144 Dec 18 03:54:07 Disconnecting: Too many authentication failures for postgres [preauth] Dec 18 03:57:23 pam_unix(sshd:auth): check pass; user unknown Dec 18 04:00:24 pam_unix(sshd:auth): check pass; user unknown Dec 18 04:03:31 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com Dec 18 04:06:20 pam_unix(sshd:auth): check pass; user unknown Dec 18 04:09:21 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com Dec 18 04:12:24 input_userauth_request: invalid user admin [preauth] Dec 18 04:15:26 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com Dec 18 04:18:19 pam_unix(sshd:auth): check pass; user unknown Dec 18 04:21:16 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com Dec 18 04:24:17 input_userauth_request: invalid user admin [preauth] Dec 18 04:27:18 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com Dec 18 04:30:26 pam_unix(sshd:auth): check pass; user unknown Dec 18 04:33:39 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com Dec 18 04:37:51 input_userauth_request: invalid user admin [preauth] Dec 18 04:41:59 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com Dec 18 04:46:08 pam_unix(sshd:auth): check pass; user unknown Dec 18 04:49:20 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com Dec 18 08:16:29 Disconnecting: Too many authentication failures for root [preauth] Dec 18 08:25:57 Disconnecting: Too many authentication failures for root [preauth] Dec 18 08:34:31 sshd[1046]: last message repeated 2 times Dec 18 08:40:56 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Dec 18 08:48:23 sshd[5760]: last message repeated 2 times Dec 18 08:57:00 Disconnecting: Too many authentication failures for root [preauth] Dec 18 09:04:35 Disconnecting: Too many authentication failures for root [preauth] Dec 18 09:11:39 Disconnecting: Too many authentication failures for postgres [preauth] Dec 18 09:15:31 pam_unix(sshd:auth): check pass; user unknown Dec 18 09:19:43 pam_unix(sshd:auth): check pass; user unknown Dec 18 09:23:51 Invalid user postgres from 10.50.5.144 Dec 18 09:27:41 Disconnecting: Too many authentication failures for postgres [preauth] Dec 18 09:31:15 pam_unix(sshd:auth): check pass; user unknown Dec 18 09:35:08 pam_unix(sshd:auth): check pass; user unknown Dec 18 09:39:21 Invalid user postgres from 10.50.5.144 Dec 18 09:43:17 Disconnecting: Too many authentication failures for postgres [preauth] Dec 18 15:44:05 refused connect from 144.0.0.28 (144.0.0.28) Dec 18 20:05:34 Invalid user arbab from 83.144.84.38 Dec 19 14:35:49 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(huzhou.ctc.mx.fund123.cn, AF_INET) failed Dec 20 01:48:12 refused connect from 144.0.0.21 (144.0.0.21) Dec 20 01:51:24 refused connect from 144.0.0.21 (144.0.0.21) Dec 20 06:20:33 refused connect from 117.21.191.201 (117.21.191.201) Dec 21 12:18:32 refused connect from 61.174.51.229 (61.174.51.229) Dec 22 03:17:57 PAM 1 more authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.50.5.64 user=root Dec 22 10:40:28 Did not receive identification string from 178.205.18.226 Dec 22 15:38:59 refused connect from 221.235.189.241 (221.235.189.241) Dec 22 15:42:19 refused connect from 221.235.189.241 (221.235.189.241) Dec 22 18:14:52 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=u15274180.onlinehome-server.com Dec 22 19:48:39 Invalid user info from 208.96.12.52 Dec 22 23:45:28 input_userauth_request: invalid user ubnt [preauth] Dec 23 05:25:08 pam_unix(sshd:auth): check pass; user unknown Dec 23 06:46:17 refused connect from 218.6.132.45 (218.6.132.45) Dec 23 11:37:51 refused connect from 122.225.109.107 (122.225.109.107) Dec 23 15:44:00 refused connect from 61.174.50.140 (61.174.50.140) Dec 23 20:08:30 Invalid user ubnt from 41.139.138.42 Dec 24 02:03:58 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.190.192.158 Dec 24 05:01:31 pam_unix(sshd:auth): check pass; user unknown Dec 24 08:55:20 Invalid user ftp from 64.150.189.227 Dec 24 10:56:31 Invalid user arbab from 85.95.227.153 Dec 24 15:58:22 reverse mapping checking getaddrinfo for 208-115-109-2-reverse.wowrack.com [208.115.109.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 24 19:52:06 refused connect from 122.225.97.74 (122.225.97.74) Dec 25 06:00:52 input_userauth_request: invalid user user [preauth] Dec 25 17:34:04 Invalid user debug from 217.160.224.141 Dec 26 01:40:51 pam_unix(sshd:auth): check pass; user unknown Dec 26 06:47:10 Invalid user ftp from 173.8.160.24 Dec 26 14:03:01 Invalid user agata from 62.141.36.249 Dec 27 03:22:51 refused connect from 122.225.109.203 (122.225.109.203) Dec 27 07:33:46 input_userauth_request: invalid user default [preauth] Dec 27 08:54:14 refused connect from 221.235.189.243 (221.235.189.243) Dec 27 09:13:30 input_userauth_request: invalid user admin [preauth] Dec 27 16:07:30 pam_unix(sshd:auth): check pass; user unknown Dec 28 01:45:08 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=s15265230.rootmaster.info Dec 28 13:03:36 reverse mapping checking getaddrinfo for 95.0.26.34.dynamic.ttnet.com.tr [95.0.26.34] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 28 17:13:06 Connection closed by 211.100.28.177 [preauth] Dec 28 22:13:00 Disconnecting: Too many authentication failures for root [preauth] Dec 28 22:15:24 refused connect from 221.235.189.245 (221.235.189.245) Dec 28 22:18:25 refused connect from 221.235.189.245 (221.235.189.245) Dec 29 00:52:11 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=061093009002.ctinets.com Dec 29 10:09:50 refused connect from 1.93.29.148 (1.93.29.148) Dec 29 13:03:17 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.211.25.27 Dec 29 17:28:19 Invalid user dreamer from 91.135.226.34 Dec 29 21:01:34 reverse mapping checking getaddrinfo for 75-102-27-58-host.colocrossing.com [75.102.27.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 30 05:02:29 Connection closed by 61.132.72.110 [preauth] Dec 31 00:10:40 Did not receive identification string from 185.63.189.123 Dec 31 04:51:35 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-88.131.111.212.addr.tdcsong.se Dec 31 23:21:25 refused connect from 221.46.148.146.bc.googleusercontent.com (146.148.46.221) Jan 1 08:00:27 Failed password for root from 62.210.142.105 port 40871 ssh2 Jan 2 14:32:37 Invalid user default from 50.31.0.49 Jan 2 15:43:42 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 15:46:46 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 15:49:48 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 15:52:52 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 15:55:52 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 15:58:54 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 16:01:56 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 16:04:59 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 16:08:01 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 16:11:02 refused connect from 221.235.188.212 (221.235.188.212) Jan 2 17:23:57 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(huzhou.ctc.mx.fund123.cn, AF_INET) failed Jan 3 05:16:57 Failed password for root from 10.50.5.64 port 4596 ssh2 Jan 3 06:22:56 Failed password for invalid user admin from 85.95.252.148 port 47550 ssh2 Jan 3 07:08:45 Disconnecting: Too many authentication failures for root [preauth] Jan 3 10:40:59 Invalid user admin from 211.172.219.251 Jan 3 16:36:34 Failed password for invalid user admin from 37.205.60.194 port 41792 ssh2 Jan 3 18:37:15 Invalid user admin from 64.197.225.178 Jan 3 22:07:17 Disconnecting: Too many authentication failures for cst8207a [preauth] Jan 4 03:34:46 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.223.78 user=root Jan 4 07:45:03 Invalid user admin from 92.61.39.162 Jan 4 14:18:06 pam_unix(sshd:auth): check pass; user unknown Jan 4 17:48:11 Failed password for invalid user debug from 74.52.105.154 port 56738 ssh2 Jan 5 02:00:10 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=s15413194.onlinehome-server.info Jan 5 08:35:09 pam_unix(sshd:auth): check pass; user unknown Jan 5 17:17:50 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.178.137.18 Jan 6 03:29:41 input_userauth_request: invalid user bill [preauth] Jan 6 17:11:11 input_userauth_request: invalid user guest [preauth] Jan 6 22:13:20 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(221.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Jan 7 11:50:05 Did not receive identification string from 10.70.191.196 Jan 7 21:29:53 sshd[14263]: last message repeated 2 times Jan 8 04:16:12 refused connect from 62-210-84-127.rev.poneytelecom.eu (62.210.84.127) Jan 8 09:37:53 gnome-keyring-daemon[10878]: couldn't create new login credential: (unknown) Jan 8 10:39:35 pam_unix(sshd:auth): check pass; user unknown Jan 8 10:51:47 Failed password for root from 10.50.5.64 port 2043 ssh2 Jan 8 10:57:40 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Jan 8 11:03:26 sshd[2742]: last message repeated 2 times Jan 8 11:08:38 Disconnecting: Too many authentication failures for root [preauth] Jan 8 11:13:44 Failed password for root from 10.50.5.64 port 3181 ssh2 Jan 8 11:19:09 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Jan 8 11:24:45 Failed password for root from 10.50.5.64 port 1330 ssh2 Jan 8 11:30:28 Disconnecting: Too many authentication failures for root [preauth] Jan 8 13:57:36 Did not receive identification string from 10.70.235.33 Jan 8 23:37:12 input_userauth_request: invalid user admin [preauth] Jan 9 05:00:55 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vwh2.kuzbass.net Jan 9 09:28:33 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(221.51.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Jan 9 18:30:47 refused connect from ip-216-93-243-138.twdx.net (216.93.243.138) Jan 10 01:43:46 refused connect from 122.225.109.112 (122.225.109.112) Jan 10 06:08:34 refused connect from 62-210-140-119.rev.poneytelecom.eu (62.210.140.119) Jan 10 06:20:30 refused connect from 62-210-140-119.rev.poneytelecom.eu (62.210.140.119) Jan 10 06:35:44 refused connect from 62-210-140-119.rev.poneytelecom.eu (62.210.140.119) Jan 10 17:06:58 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.239.228.4 user=root Jan 11 04:34:24 Failed password for invalid user ubnt from 83.103.67.197 port 3489 ssh2 Jan 11 19:52:44 Failed password for root from 178.63.40.211 port 39573 ssh2 Jan 11 23:17:04 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.10.11.30 Jan 12 09:02:09 passwd[24321]: gkr-pam: couldn't change password for the login keyring: the passwords didn't match. Jan 12 12:29:33 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-180-69.rev.poneytelecom.eu user=root Jan 12 14:18:29 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(chris-laptop.ottawa.ad.algonquincollege.com, AF_INET) failed Jan 12 22:47:51 Failed password for root from 62.210.84.132 port 40824 ssh2 Jan 12 22:55:09 refused connect from 62-210-84-132.rev.poneytelecom.eu (62.210.84.132) Jan 13 04:19:41 Connection closed by 58.215.160.219 [preauth] Jan 13 13:45:10 su[18206]: - /dev/pts/14 jiangw:root Jan 13 16:22:20 gnome-keyring-daemon[31903]: module_instances: assertion `module' failed Jan 13 19:51:06 Failed password for root from 222.161.4.151 port 38911 ssh2 Jan 13 23:44:51 refused connect from 82.207.98.112 (82.207.98.112) Jan 14 00:29:06 Connection closed by 120.193.193.157 [preauth] Jan 14 06:35:09 refused connect from ip-216-93-243-138.twdx.net (216.93.243.138) Jan 14 10:21:35 gnome-keyring-daemon[4507]: couldn't create new login credential: (unknown) Jan 14 11:46:31 passwd[24146]: gkr-pam: couldn't change password for the login keyring: the passwords didn't match. Jan 14 12:56:15 passwd[8193]: gkr-pam: couldn't change password for the login keyring: the passwords didn't match. Jan 14 22:09:08 Did not receive identification string from 211.90.1.201 Jan 15 04:16:39 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(63-138-249-247.customer.static.ip.paetec.net, AF_INET) failed Jan 15 07:44:35 Connection closed by 82.240.203.153 [preauth] Jan 15 08:19:08 Invalid user homu000r from 10.70.194.51 Jan 15 09:26:45 gnome-keyring-daemon[27062]: lookup_login_keyring: assertion `GCK_IS_SESSION (session)' failed Jan 15 10:57:16 gnome-keyring-daemon[26925]: couldn't find secret store module: (unknown) Jan 15 16:19:58 gnome-keyring-daemon[12280]: couldn't find secret store module: (unknown) Jan 16 00:41:03 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(177.50.174.61.dial.wz.zj.dynamic.163data.com.cn, AF_INET) failed Jan 16 08:35:14 gnome-keyring-daemon[3616]: egg_error_message: assertion `error' failed Jan 16 09:20:54 Disconnecting: Too many authentication failures for root [preauth] Jan 16 11:42:53 Invalid user from 10.70.212.138 Jan 16 14:05:20 Failed password for root from 62.210.82.189 port 39555 ssh2 Jan 16 20:51:45 refused connect from 183.136.216.3 (183.136.216.3) Jan 17 03:43:29 Failed password for root from 157.7.72.125 port 49970 ssh2 Jan 17 10:55:52 Connection closed by 185.26.125.56 [preauth] Jan 18 03:51:58 Disconnecting: Too many authentication failures for root [preauth] Jan 18 06:46:15 refused connect from s15388330.onlinehome-server.info (82.165.197.250) Jan 18 10:54:25 warning: /etc/hosts.allow, line 15: host name/name mismatch: static59.200.110.129.static.web724.net != 74.86.112.100-static.reverse.web724.com Jan 18 17:24:51 gnome-keyring-daemon[31361]: couldn't create new login credential: (unknown) Jan 18 22:07:43 sshd[7125]: last message repeated 2 times Jan 18 22:13:24 sshd[10008]: last message repeated 2 times Jan 18 22:18:14 Failed password for root from 10.50.5.64 port 3544 ssh2 Jan 18 22:22:59 Disconnecting: Too many authentication failures for root [preauth] Jan 18 22:28:06 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Jan 18 22:33:02 PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=idallen-linux.ottawa.ad.algonquincollege.com user=root Jan 18 22:37:53 Failed password for root from 10.50.5.64 port 3569 ssh2 Jan 18 22:52:17 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.techscoot.com Jan 19 10:27:44 pam_unix(sshd:auth): check pass; user unknown Jan 20 02:17:37 Connection closed by 202.121.199.171 [preauth] Jan 20 12:22:39 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.70.240.177 Jan 20 22:09:12 warning: /etc/hosts.allow, line 15: host name/address mismatch: 206.132.178.107 != dialdyn107.travel-net.com Jan 21 07:57:31 refused connect from 122.225.109.112 (122.225.109.112) Jan 21 12:30:06 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.192.105.70 Jan 21 16:56:52 reverse mapping checking getaddrinfo for jordy-laptop.ottawa.ad.algonquincollege.com [10.100.9.161] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 21 23:09:41 refused connect from 115.231.218.130 (115.231.218.130) Jan 22 08:55:13 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(fixed-203-240-28.iusacell.net, AF_INET) failed Jan 22 22:16:58 Failed password for root from 195.154.168.158 port 48092 ssh2 Jan 23 04:42:49 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(147.4.161.222.adsl-pool.jlccptt.net.cn, AF_INET) failed Jan 23 11:43:22 Connection closed by 180.250.80.102 [preauth] Jan 23 21:50:39 refused connect from 115.231.218.130 (115.231.218.130) Jan 23 23:06:31 Connection closed by 149.129.61.212 [preauth] Jan 24 09:42:25 refused connect from 69.64.64.62 (69.64.64.62) Jan 24 13:58:01 channel_by_id: 0: bad id: channel free Jan 25 17:16:01 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(184-175-21-181.cable.teksavvy.com, AF_INET) failed Jan 26 09:19:15 Failed password for root from 195.154.167.195 port 49711 ssh2 Jan 26 11:21:25 pam_unix(sshd:auth): check pass; user unknown Jan 26 20:16:51 refused connect from 183.136.216.3 (183.136.216.3) Jan 28 09:15:34 reverse mapping checking getaddrinfo for tusharkumar-pc.ottawa.ad.algonquincollege.com [10.100.14.155] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 28 13:06:21 Connection closed by 202.207.240.35 [preauth] Jan 29 03:54:55 Connection closed by 58.67.159.31 [preauth] Jan 29 11:18:04 warning: /etc/hosts.allow, line 15: can't verify hostname: getaddrinfo(72.9.158.62.servidorlatinoamerica.com, AF_INET) failed Jan 30 12:02:21 Did not receive identification string from 10.70.251.187